last executing test programs:

314.278204ms ago: executing program 1 (id=1558):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r5, &(0x7f0000000700)="f574", 0x2)
splice(r5, &(0x7f0000000040), r4, 0x0, 0x800000000ff, 0x0)
vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000340)="6af2a8", 0x3}], 0x1, 0x8)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x101}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc041}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x4004, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008880}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r9)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="150601010000ffdbdf251000000005000f003100000008000100", @ANYRES32=0x0, @ANYBLOB="050010004b"], 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x2000888c)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r11=>0x0)
sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r10, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xa8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xe4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x86}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000280)='westwood\x00', 0x9)
getsockopt$inet_tcp_buf(r12, 0x6, 0x1a, 0x0, &(0x7f0000000300))

240.442438ms ago: executing program 0 (id=1559):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000000024000724"], 0xd0}}, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)

239.827385ms ago: executing program 1 (id=1560):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0)
sendmsg$IEEE802154_LIST_PHY(r0, 0x0, 0x68800)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e400c207", @ANYRES16=r2, @ANYBLOB="000827bd7000fcdbdf25010000000800020002000000c80008801c0007800800050059e6626f08000500a408927908000600a80000003c0007800800060051000000080006009c000000080006004b000000080005007417146708000500a7741422080006002f000000080005009fd81a1f1400078008000600670000000800050061e587781400078008000600a100000008000500531b8f701c0007800800050072b3c9090800050029f48d40080005000525e55514000780080006009900000008000500c963371e1400078008000500f17e357108000500d857263a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004080}, 0x8004) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e400c207", @ANYRES16=r2, @ANYBLOB="000827bd7000fcdbdf25010000000800020002000000c80008801c0007800800050059e6626f08000500a408927908000600a80000003c0007800800060051000000080006009c000000080006004b000000080005007417146708000500a7741422080006002f000000080005009fd81a1f1400078008000600670000000800050061e587781400078008000600a100000008000500531b8f701c0007800800050072b3c9090800050029f48d40080005000525e55514000780080006009900000008000500c963371e1400078008000500f17e357108000500d857263a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004080}, 0x8004)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
unshare(0x48000280)

238.561319ms ago: executing program 2 (id=1561):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x1, [{0xe, 0xc8}, {0x9, 0xff, 0x3}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f, 0x2e, 0x0, 0x61, 0x0, 0x30]}}, &(0x7f0000001440)=""/96, 0x47, 0x60, 0x0, 0x2}, 0x28)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@o_path={&(0x7f0000001540)='./file0\x00', 0x0, 0x8, r0}, 0x18)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)='%pI4   \x00'}, 0x20)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x5, 0x5, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x0, &(0x7f0000001240), &(0x7f0000001140)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001500)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001800)=[r0, r3, r4, r5, 0xffffffffffffffff, r6], &(0x7f0000001840)=[{0x5, 0x5, 0xf, 0xc}, {0x2, 0x5, 0xf, 0xa}, {0x4, 0x2, 0xf}, {0x0, 0x3, 0x5, 0x5}], 0x10, 0x3}, 0x94)
recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {0x0}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4a}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)={0x38, r10, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030f0000000000000000070000003000028008000200000000000c000400"], 0x44}}, 0x0)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x108, r8, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @loopback, 0x367}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x8}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r11, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r12, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
sendto$inet6(r12, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c)
connect$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)

238.243663ms ago: executing program 0 (id=1562):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair(0x22, 0x2, 0x7, &(0x7f00000000c0)) (async, rerun: 64)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async, rerun: 64)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) (async)
sendto$inet(r0, &(0x7f0000000080)='v', 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f000000b5c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x47}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000008f00)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000008dc0)}, {0x0}], 0x6}, 0x100}], 0x3, 0x40002380, 0x0)

237.893685ms ago: executing program 0 (id=1563):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r1, &(0x7f0000000500), 0xff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYRES8=r0, @ANYBLOB="aeccc2e144d6b4b0ef33f8d6fcc1ad474e9f1da55eacb8d4238789ee3955a9ca4ea6aeaf13b095a035302845dc977ccf556e4942e95650871980010e6568a09b3986a2bc0de699775e3b6776b1b664fef2227d929cb2d480cfd41f624393df45b0d2b3a9aa68e44f9779cc56488c471e0835acdccb4735d52f1576df994319f0fca0763a0789a062936b8ca1882065395c7b0ff95b", @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0x0, 0x0, 0x8}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84040}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000007, 0x1010, r0, 0x578df000)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r6}, 0x10)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x550, 0x2b8, 0xf8, 0x3b0, 0x0, 0x2b8, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, &(0x7f00000000c0), {[{{@ipv6={@private1, @empty, [0xff, 0x0, 0xffffffff, 0xff], [0x0, 0x0, 0x0, 0xff], 'wg0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x87, 0x0, 0x5, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@broadcast, 0x37, 0x1b, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x19}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xff, 0xffffff00], 'macvlan0\x00', 'geneve0\x00', {0xff}, {}, 0x67, 0x5, 0x4, 0x45}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x31}}}, {{@ipv6={@loopback, @empty, [0xff, 0x0, 0xff, 0xff000000], [0xff, 0xff, 0xffffffff, 0xffffffff], 'vcan0\x00', 'team_slave_1\x00', {0x80}, {0xff}, 0x3c, 0x68, 0x0, 0x20}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
unshare(0x62040200)

189.647537ms ago: executing program 2 (id=1564):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
r0 = socket$inet(0x2, 0x3, 0x8d) (rerun: 64)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async, rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
unshare(0x22020600) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000005000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x35, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000000c0)={<r8=>r7})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES32, @ANYBLOB="0000000000009500"/24, @ANYRES32=r1, @ANYRESDEC=r8], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r9, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="3c4253b91020000000000000", @ANYRES32=r10, @ANYBLOB="74806f7c283a8a009f06b31696fbf4dc80c49e5e6f727e40e39eb3fb085048454dcb", @ANYRES64=0x0], 0x20) (async)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={<r11=>0x0, @local, @local}, &(0x7f0000000140)=0xc) (async)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0x39, r11}) (async, rerun: 64)
socket(0xa, 0x1, 0x0) (rerun: 64)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
sendmsg$nl_xfrm(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) (async, rerun: 32)
r15 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000f9ffff3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000325b6b3fcac1d56300"/101], 0xb8}}, 0x0) (async)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0)

100.724941ms ago: executing program 0 (id=1565):
unshare(0x24060400)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x7, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
unshare(0x4a000700)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_buf(r7, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)

96.850411ms ago: executing program 2 (id=1566):
syz_emit_ethernet(0x1ee, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021001b83a00fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000006009000000001100fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000002f0000000000000f25c9bd942c73856184f927b7e4e553c7f46b4f930d2f1c30ca13154ac498c3eaf13ab58393d7c20400000006009da17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371050a0000008c65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e000e8b168e4b48529453d91cea42403007080000000000000000e63051cd0670c83a962406a03b"], 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20008041)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x7, "0441b613a3"}, @lsrr={0x83, 0x7, 0x7e, [@dev={0xac, 0x14, 0x14, 0x41}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1)

96.728884ms ago: executing program 1 (id=1567):
r0 = socket(0x22, 0x2, 0x4)
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000000))
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x25, 0x0, "394281e595fd9eb506cd1a5555af72cd375de18882e299a83da979fa66c8f49889716b8dc73f6c5518c12abfb88e8b811ed8bd3623253c58eed51af8b75008e2576da2b0f564a63d98fb21dc8ab90d76"}, 0xd8)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000480)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x5}, 0x50) (async)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000480)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000500), &(0x7f00000000c0)=@tcp6, 0x2}, 0x20)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)

95.475618ms ago: executing program 2 (id=1568):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="050427bd7000fddbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084)

30.007914ms ago: executing program 0 (id=1569):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$tipc(0x1e, 0x2, 0x0) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000024000198fb3cdcfcd0c9dcae80032dbdffff0100000014004e00fc020000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r11, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) (async)
getsockopt$inet_tcp_buf(r11, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff1, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1cd9b}, @TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="482ac3d02fcaf5805932", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7]}]}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16e13}, @TCA_FLOW_XOR={0x8, 0x7, 0x100}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000"], 0x64}}, 0x0)
r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000000540))
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000008a14000000110020e8641801000000000000000000"], 0x70}}, 0x0)
ioctl$SIOCAX25CTLCON(r8, 0x89e8, &(0x7f0000000740)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, 0x8, 0x6f5, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

28.402064ms ago: executing program 1 (id=1570):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001a40)={0x18, 0x14, 0x1, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x105, 0x0, 0x0, @fd}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000}, 0x40000c4)
close(r0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000100)=0x2c)

26.063055ms ago: executing program 2 (id=1571):
socket(0x2a, 0x2, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
socket$rds(0x15, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x7fd9001b, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r5, 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async)
recvmmsg(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x40, 0x7800, 0x100007, 0x7, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) (async)
unshare(0x62040200) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) (async)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) (async)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async)
write(r8, &(0x7f00000001c0)="240000001a005f0214f9f4070009060681000000040027f2439e1c7832fdfbff01000000", 0x24) (async)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0)

25.917996ms ago: executing program 1 (id=1572):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x34, 0x7b, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x140}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x10)

3.798137ms ago: executing program 2 (id=1573):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000a62000/0x2000)=nil, 0x2000, 0x200000a, 0x13, r1, 0x0) (async)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r2, &(0x7f00000000c0)={0x6, 0x20, 0x80000000, 0x20, 0x6}, 0x48)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) (async)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) (async)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c9ad9", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="5d82f0e2b3d4abdb67d9dc1bcb461706e909b68346b66ea21ff63c75338e3922", 0x20}, {&(0x7f00000005c0)="a15e7edf", 0x4}, {&(0x7f0000000600)="dc5b81a87d755fe2b309e6a7b01c98153daeb19011297bf80832", 0x1a}, {&(0x7f0000000640)="582038bdfbeb45e0151923cfc11e074c601c6dfeba39a4b5eb617da00459cfb6d71999094e6848c8f895", 0x2a}, {&(0x7f0000000680)="2f9db58d797aadc0d9ee52e2e24eea6e3e2e09a0ef7504e042f695fce0552c3ddd9eb4ea4d7344fe37cbe7ba126d575c739e05acbbabd6975200be54e0855ecf1fa8b13c0d0d55c3bae4cc929ec84519627f6dd0e275443fb9a10cb4bfa1aa88aa7aa15b4ff9666379eb76b195778ac1a00538519ea5", 0x76}], 0x5}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000840)="a7ec7c226f386a3fb5afd03aa8e89a5cbf3ac9bebdd6289240902243cb007a41cca5fc44b2294b5466d4defdd60127329e7d7e6ea7293b201e71d2e3b368ebdcda0f9cee830a78fc25c25544a6cee4bbb3152889ddff7f34e0339b3fbc00d68ce136794db954c4bb27c73f35f15ff70cde5d40fcb6e4c3533edca80b74bd67950fc402f40fe11b63ecc0b6cd3b38eb73980fcbe8747cd1bdda1eef0bd75848b650cb97ac4adb37fb652ba17d810ca22216c9b9a1f69e94dc950d9627f2b7dd34c7217fd91e9a3a275924e444702fcaf63624c86f3efffd347fd615fafa9adce6fdaeb5235a45630b1e81b00546835d99e4eb30d4", 0xf4}, {&(0x7f0000000940)="a4b05417201c05703debc682e8a35bba713c184f5e84212be262bb0ba05cd39f34e21fb2a8f43d663e53f49dcdc1b1d7647ba03069d35793aa6191ca28bedbec8a341d78bfd0055e658e05ac2c03d1457ebf1b42c7f7a656b3f46d142f806b78c4e6c6c42031e7a361ac944184d53f", 0x6f}, {0x0}], 0x3}}], 0x3, 0x2)

1.793138ms ago: executing program 1 (id=1574):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c)
r3 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x10, 0x0, &(0x7f00000001c0))
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

0s ago: executing program 0 (id=1575):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var={0x1000}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xc}, {}, {0x0, 0x80}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x2}, @volatile={0x2}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x3, 0xe2, &(0x7f0000000680)=""/229, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x29}, 0x94)
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
r4 = socket(0x2, 0x3, 0x6)
bind$inet(r4, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(r4, 0x0, 0xb00, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000180)={'ip6tnl0\x00', 0x40000000})
ioctl(r8, 0x8b20, &(0x7f0000000040))
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xf07, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25974' (ED25519) to the list of known hosts.
syzkaller login: [   40.753592][ T5769] cgroup: Unknown subsys name 'net'
[   40.879276][ T5769] cgroup: Unknown subsys name 'cpuset'
[   40.882762][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.658366][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.423271][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.427724][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.430949][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.433820][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.437460][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.440354][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.440551][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.457252][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.460325][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.462782][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.466247][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.466390][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.471800][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.472564][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.478224][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.655429][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   46.684130][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   46.737587][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   46.766416][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.768791][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.771133][ T5840] bridge_slave_0: entered allmulticast mode
[   46.774020][ T5840] bridge_slave_0: entered promiscuous mode
[   46.802541][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.805261][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.808426][ T5840] bridge_slave_1: entered allmulticast mode
[   46.810940][ T5840] bridge_slave_1: entered promiscuous mode
[   46.846170][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.849407][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.852184][ T5848] bridge_slave_0: entered allmulticast mode
[   46.855230][ T5848] bridge_slave_0: entered promiscuous mode
[   46.861082][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.866990][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.869649][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.871912][ T5848] bridge_slave_1: entered allmulticast mode
[   46.874246][ T5848] bridge_slave_1: entered promiscuous mode
[   46.877537][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.920193][ T5840] team0: Port device team_slave_0 added
[   46.923425][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.926373][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.929905][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.932208][ T5844] bridge_slave_0: entered allmulticast mode
[   46.934805][ T5844] bridge_slave_0: entered promiscuous mode
[   46.938671][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.948665][ T5840] team0: Port device team_slave_1 added
[   46.955669][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.958251][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.960885][ T5844] bridge_slave_1: entered allmulticast mode
[   46.963436][ T5844] bridge_slave_1: entered promiscuous mode
[   46.975450][ T5848] team0: Port device team_slave_0 added
[   46.983927][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.993697][ T5848] team0: Port device team_slave_1 added
[   47.002151][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.006128][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.009220][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.019717][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.036143][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.038763][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.046749][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.051011][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.053174][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.061340][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.073842][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.075921][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.084378][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.091606][ T5844] team0: Port device team_slave_0 added
[   47.095868][ T5844] team0: Port device team_slave_1 added
[   47.141167][ T5848] hsr_slave_0: entered promiscuous mode
[   47.143311][ T5848] hsr_slave_1: entered promiscuous mode
[   47.145766][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.149834][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.159522][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.166781][ T5840] hsr_slave_0: entered promiscuous mode
[   47.170365][ T5840] hsr_slave_1: entered promiscuous mode
[   47.172936][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   47.175110][ T5840] Cannot create hsr debugfs directory
[   47.178459][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.181109][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.190783][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.253035][ T5844] hsr_slave_0: entered promiscuous mode
[   47.255259][ T5844] hsr_slave_1: entered promiscuous mode
[   47.257743][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   47.259631][ T5844] Cannot create hsr debugfs directory
[   47.399099][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.410162][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.420711][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.435136][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.443927][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.455089][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.466700][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.476109][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.498217][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.503580][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.518420][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.521290][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.524242][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.527223][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.535131][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.540845][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.543692][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.546693][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.549646][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.558772][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.599981][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.602145][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.604450][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.606827][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.629835][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.644581][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.647947][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.650511][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.652892][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.656090][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.659467][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.669187][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.675258][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   47.686847][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.689060][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.698918][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.701115][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.706295][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   47.714113][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.716823][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.728224][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.730821][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.746873][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.762717][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.789204][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   47.799687][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.802426][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.827972][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.830764][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.870109][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.905772][ T5848] veth0_vlan: entered promiscuous mode
[   47.922124][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.926312][ T5848] veth1_vlan: entered promiscuous mode
[   47.964003][ T5840] veth0_vlan: entered promiscuous mode
[   47.972659][ T5848] veth0_macvtap: entered promiscuous mode
[   47.978332][ T5840] veth1_vlan: entered promiscuous mode
[   47.982817][ T5848] veth1_macvtap: entered promiscuous mode
[   47.991247][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.996978][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.006779][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.012100][ T5840] veth0_macvtap: entered promiscuous mode
[   48.020829][ T5712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.023858][ T5840] veth1_macvtap: entered promiscuous mode
[   48.029833][ T5712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.035193][ T5712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.039259][ T5712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.048105][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.062992][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.075968][ T5712] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.079349][ T5712] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.091847][ T5712] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.104145][ T5712] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.109763][ T5844] veth0_vlan: entered promiscuous mode
[   48.116088][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.124888][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.139322][ T5844] veth1_vlan: entered promiscuous mode
[   48.144565][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.153569][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.191292][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.198452][ T5844] veth0_macvtap: entered promiscuous mode
[   48.211363][ T5844] veth1_macvtap: entered promiscuous mode
[   48.217831][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.220969][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.265929][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.278290][ T5910] syzkaller1: entered promiscuous mode
[   48.280468][ T5910] syzkaller1: entered allmulticast mode
[   48.284178][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.288257][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.289736][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.304228][ T5712] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.310241][ T5712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.313971][ T5712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.321882][ T5712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.385914][ T5912] netlink: 'syz.2.3': attribute type 6 has an invalid length.
[   48.391657][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.399300][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.429834][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.432656][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.467855][ T5851] Bluetooth: hci0: command tx timeout
[   48.487861][ T5918] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   48.523838][ T5922] geneve2: entered promiscuous mode
[   48.547363][ T5238] Bluetooth: hci2: command tx timeout
[   48.549568][ T5851] Bluetooth: hci1: command tx timeout
[   48.630448][ T5934] netlink: 'syz.2.8': attribute type 13 has an invalid length.
[   48.633421][ T5934] netlink: 'syz.2.8': attribute type 17 has an invalid length.
[   48.681678][ T5934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   48.723266][ T5937] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.782187][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   49.424061][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'.
[   49.610998][ T5958] netlink: 'syz.2.15': attribute type 13 has an invalid length.
[   49.613681][ T5958] netlink: 'syz.2.15': attribute type 17 has an invalid length.
[   49.623564][ T5958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   49.770302][ T5968] netlink: 19 bytes leftover after parsing attributes in process `syz.1.18'.
[   50.373534][ T6009] netlink: 'syz.1.25': attribute type 1 has an invalid length.
[   50.445429][ T6012] netlink: 48 bytes leftover after parsing attributes in process `syz.0.26'.
[   50.548871][ T5851] Bluetooth: hci0: command tx timeout
[   50.570625][ T6016] lo speed is unknown, defaulting to 1000
[   50.572791][ T6016] lo speed is unknown, defaulting to 1000
[   50.575612][ T6016] lo speed is unknown, defaulting to 1000
[   50.585395][ T6016] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   50.609154][ T6016] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   50.628205][ T5851] Bluetooth: hci1: command tx timeout
[   50.631679][ T5238] Bluetooth: hci2: command tx timeout
[   50.634230][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27'.
[   50.639246][ T6016] lo speed is unknown, defaulting to 1000
[   50.641653][ T6016] lo speed is unknown, defaulting to 1000
[   50.644069][ T6016] lo speed is unknown, defaulting to 1000
[   50.748215][ T6026] lo speed is unknown, defaulting to 1000
[   50.794836][ T6020] lo speed is unknown, defaulting to 1000
[   50.938191][ T6039] syzkaller0: entered promiscuous mode
[   50.940451][ T6039] syzkaller0: entered allmulticast mode
[   51.034018][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'.
[   51.043456][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'.
[   51.048828][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'.
[   51.056874][ T6052] lo speed is unknown, defaulting to 1000
[   51.057014][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'.
[   51.059671][ T6052] lo speed is unknown, defaulting to 1000
[   51.061969][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'.
[   51.063905][ T6052] lo speed is unknown, defaulting to 1000
[   51.083706][ T6052] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   51.101007][ T6052] lo speed is unknown, defaulting to 1000
[   51.111404][ T6052] lo speed is unknown, defaulting to 1000
[   51.113933][ T6052] lo speed is unknown, defaulting to 1000
[   51.116638][ T6052] lo speed is unknown, defaulting to 1000
[   51.168527][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.44'.
[   51.172842][ T6052] netlink: 'syz.1.40': attribute type 4 has an invalid length.
[   51.212890][ T6064] team0: No ports can be present during mode change
[   51.232837][ T6066] syzkaller1: entered promiscuous mode
[   51.235006][ T6066] syzkaller1: entered allmulticast mode
[   51.279638][ T6068] lo speed is unknown, defaulting to 1000
[   51.289498][ T6069] lo speed is unknown, defaulting to 1000
[   51.435105][ T6075] Zero length message leads to an empty skb
[   51.516002][ T6088] netlink: zone id is out of range
[   51.518130][ T6088] netlink: zone id is out of range
[   51.520094][ T6088] netlink: zone id is out of range
[   51.522070][ T6088] netlink: zone id is out of range
[   51.524044][ T6088] netlink: zone id is out of range
[   51.525935][ T6088] netlink: zone id is out of range
[   51.528857][ T6088] netlink: zone id is out of range
[   51.530440][ T6088] netlink: zone id is out of range
[   51.532935][ T6088] syzkaller1: entered promiscuous mode
[   51.534568][ T6088] syzkaller1: entered allmulticast mode
[   51.706633][ T6099] lo speed is unknown, defaulting to 1000
[   51.754475][ T6099] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[   51.758999][ T6099] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   51.862362][ T6112] netlink: 'syz.1.59': attribute type 1 has an invalid length.
[   51.928734][ T6114] veth3: entered promiscuous mode
[   51.975738][ T6112] erspan0: entered allmulticast mode
[   52.044969][ T6117] netlink: 'syz.2.60': attribute type 23 has an invalid length.
[   52.055794][ T6117] netlink: 'syz.2.60': attribute type 21 has an invalid length.
[   52.111430][ T6123] siw: device registration error -23
[   52.245956][ T6135] syzkaller0: entered promiscuous mode
[   52.248040][ T6135] syzkaller0: entered allmulticast mode
[   52.383463][ T6138] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.591689][ T6151] siw: device registration error -23
[   52.628392][ T5851] Bluetooth: hci0: command tx timeout
[   52.707487][ T5238] Bluetooth: hci2: command tx timeout
[   52.710821][ T5851] Bluetooth: hci1: command tx timeout
[   53.294562][ T6165] lo speed is unknown, defaulting to 1000
[   53.318223][ T6162] lo speed is unknown, defaulting to 1000
[   53.675682][ T6187] lo speed is unknown, defaulting to 1000
[   53.986591][ T6226] netlink: 'syz.0.93': attribute type 16 has an invalid length.
[   53.992352][ T6226] netlink: 'syz.0.93': attribute type 17 has an invalid length.
[   54.053844][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.056821][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.102357][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.107796][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.151097][ T5712] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.154257][ T5712] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.200685][ T5712] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.204168][ T5712] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.320088][ T6253] warning: `syz.1.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   54.347974][ T6255] syzkaller1: entered promiscuous mode
[   54.349739][ T6255] syzkaller1: entered allmulticast mode
[   54.399322][ T6260] team0: No ports can be present during mode change
[   54.707258][ T5851] Bluetooth: hci0: command tx timeout
[   54.787243][ T5851] Bluetooth: hci2: command tx timeout
[   54.797460][ T5851] Bluetooth: hci1: command tx timeout
[   55.370728][ T6285] __nla_validate_parse: 22 callbacks suppressed
[   55.370741][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'.
[   55.375531][ T6285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.110'.
[   55.378553][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'.
[   55.381974][ T6285] team0: No ports can be present during mode change
[   55.417875][ T6289] netlink: 56 bytes leftover after parsing attributes in process `syz.2.112'.
[   55.455353][ T6294] lo speed is unknown, defaulting to 1000
[   55.476708][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.114'.
[   55.618298][ T6313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'.
[   55.623734][ T6313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.119'.
[   55.626428][ T6313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'.
[   55.637091][ T6313] team0: No ports can be present during mode change
[   55.668138][ T6319] Bluetooth: MGMT ver 1.23
[   55.671378][ T6314] tipc: Can't bind to reserved service type 2
[   55.700500][ T6323] netlink: 'syz.2.121': attribute type 13 has an invalid length.
[   55.712591][ T6323] netlink: 'syz.2.121': attribute type 17 has an invalid length.
[   55.721856][ T6323] net_ratelimit: 12 callbacks suppressed
[   55.721861][ T6323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   55.743144][ T6323] lo speed is unknown, defaulting to 1000
[   55.777703][ T6316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   56.333820][ T6338] lo speed is unknown, defaulting to 1000
[   56.588970][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'.
[   56.635255][ T6352] netlink: 300 bytes leftover after parsing attributes in process `syz.0.132'.
[   56.692998][ T6354] netlink: 'syz.0.132': attribute type 13 has an invalid length.
[   56.696134][ T6354] netlink: 'syz.0.132': attribute type 17 has an invalid length.
[   56.749419][ T6354] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.753585][ T6354] 8021q: adding VLAN 0 to HW filter on device team0
[   56.760120][ T6354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   56.781755][ T6355] lo speed is unknown, defaulting to 1000
[   56.840504][ T6354] syz.0.132 (6354) used greatest stack depth: 19440 bytes left
[   57.010290][ T6376] lo speed is unknown, defaulting to 1000
[   57.250397][ T6385] tipc: Started in network mode
[   57.252059][ T6385] tipc: Node identity 9668a5c4baa, cluster identity 4711
[   57.254398][ T6385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.256928][ T6385] syzkaller0: entered promiscuous mode
[   57.259336][ T6385] syzkaller0: entered allmulticast mode
[   57.264302][ T6385] tipc: Resetting bearer <eth:syzkaller0>
[   57.273302][ T6385] tipc: Resetting bearer <eth:syzkaller0>
[   57.276303][ T6385] tipc: Disabling bearer <eth:syzkaller0>
[   57.471387][ T6394] lo speed is unknown, defaulting to 1000
[   57.883065][ T6399] netlink: 'syz.1.146': attribute type 3 has an invalid length.
[   57.938706][ T6401] lo speed is unknown, defaulting to 1000
[   57.952424][ T6412] team0: No ports can be present during mode change
[   58.238577][ T6424] lo speed is unknown, defaulting to 1000
[   58.264365][ T6424] netlink: 'syz.2.153': attribute type 1 has an invalid length.
[   58.275636][ T6424] lo speed is unknown, defaulting to 1000
[   58.422941][ T6437] netlink: 'syz.2.156': attribute type 4 has an invalid length.
[   58.432187][ T6437] netlink: 'syz.2.156': attribute type 4 has an invalid length.
[   58.708605][ T6451] team0: No ports can be present during mode change
[   58.973316][ T6468] team0: No ports can be present during mode change
[   59.055140][ T6473] siw: device registration error -23
[   59.101366][ T6473] validate_nla: 1 callbacks suppressed
[   59.101393][ T6473] netlink: 'syz.0.171': attribute type 4 has an invalid length.
[   59.185053][ T6487] netlink: 'syz.2.175': attribute type 1 has an invalid length.
[   59.211573][ T6489] team0: No ports can be present during mode change
[   59.753204][ T6532] lo speed is unknown, defaulting to 1000
[   59.819601][ T6532] lo speed is unknown, defaulting to 1000
[   59.990507][ T6548] lo speed is unknown, defaulting to 1000
[   60.448756][ T6608] __nla_validate_parse: 20 callbacks suppressed
[   60.448772][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.197'.
[   60.666325][ T6586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   60.860794][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'.
[   61.273464][ T6675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.279708][ T6676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.408522][ T6683] netlink: 'syz.2.223': attribute type 4 has an invalid length.
[   61.408529][ T6688] netlink: 'syz.2.223': attribute type 4 has an invalid length.
[   61.471321][ T6696] syzkaller1: entered promiscuous mode
[   61.473092][ T6696] syzkaller1: entered allmulticast mode
[   61.651654][ T6702] lo speed is unknown, defaulting to 1000
[   61.716609][ T6708] netlink: 'syz.2.231': attribute type 16 has an invalid length.
[   61.720063][ T6708] netlink: 'syz.2.231': attribute type 17 has an invalid length.
[   61.759744][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.763002][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.806556][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.812217][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.877355][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.881116][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.884886][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.896190][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.947432][ T6715] lo speed is unknown, defaulting to 1000
[   62.043066][ T6721] lo speed is unknown, defaulting to 1000
[   62.452080][ T6756] lo speed is unknown, defaulting to 1000
[   62.467614][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[   62.516543][ T6764] Can't find ip_set type hash
[   62.642374][    T9] IPVS: starting estimator thread 0...
[   62.719265][ T6791] netlink: 'syz.1.255': attribute type 4 has an invalid length.
[   62.721735][ T6792] netlink: 'syz.1.255': attribute type 4 has an invalid length.
[   62.727656][ T6781] IPVS: using max 92 ests per chain, 220800 per kthread
[   62.743581][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.256'.
[   62.747212][ T6799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.256'.
[   62.749999][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.256'.
[   62.753050][ T6799] team0: No ports can be present during mode change
[   62.897265][ T6802] netlink: 6 bytes leftover after parsing attributes in process `syz.1.257'.
[   62.901974][ T6802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.914894][    T9] lo speed is unknown, defaulting to 1000
[   63.032026][ T6806] netlink: 'syz.1.259': attribute type 4 has an invalid length.
[   63.035931][   T47] lo speed is unknown, defaulting to 1000
[   63.038011][ T6806] netlink: 'syz.1.259': attribute type 4 has an invalid length.
[   63.040891][   T47] syz2: Port: 1 Link DOWN
[   63.044284][ T5310] lo speed is unknown, defaulting to 1000
[   63.046651][ T5310] syz2: Port: 1 Link ACTIVE
[   63.395621][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.269'.
[   63.406874][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.269'.
[   63.440971][ T6836] siw: device registration error -23
[   63.519916][ T6841] geneve2: left promiscuous mode
[   63.569529][ T6845] erspan0: left allmulticast mode
[   63.581079][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'.
[   63.619485][ T6845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.641830][ T6848] lo speed is unknown, defaulting to 1000
[   63.675470][ T6843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.022060][ T6817] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   64.095878][ T6861] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   64.102207][ T6861] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   64.107693][ T6861] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   64.110196][ T6861] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   64.115184][ T6861] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   64.120381][ T6861] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   64.195318][ T6874] team0: No ports can be present during mode change
[   64.250115][ T6879] lo speed is unknown, defaulting to 1000
[   64.533442][ T6912] lo speed is unknown, defaulting to 1000
[   64.705402][ T6922] siw: device registration error -23
[   64.750233][ T6925] lo speed is unknown, defaulting to 1000
[   64.865321][ T6933] lo speed is unknown, defaulting to 1000
[   64.890486][ T6935] wg1 speed is unknown, defaulting to 1000
[   64.892455][ T6935] wg1 speed is unknown, defaulting to 1000
[   64.894525][ T6935] wg1 speed is unknown, defaulting to 1000
[   64.900503][ T6935] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   64.914855][ T6935] wg1 speed is unknown, defaulting to 1000
[   64.929566][ T6935] wg1 speed is unknown, defaulting to 1000
[   64.931924][ T6935] wg1 speed is unknown, defaulting to 1000
[   64.934143][ T6935] wg1 speed is unknown, defaulting to 1000
[   64.954599][ T6935] wg1 speed is unknown, defaulting to 1000
[   64.958387][ T6935] wg1 speed is unknown, defaulting to 1000
[   65.096750][ T6963] validate_nla: 6 callbacks suppressed
[   65.096761][ T6963] netlink: 'syz.0.298': attribute type 13 has an invalid length.
[   65.103653][ T6963] netlink: 'syz.0.298': attribute type 17 has an invalid length.
[   65.108856][ T6963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.128241][ T6963] lo speed is unknown, defaulting to 1000
[   65.153074][ T6963] wg1 speed is unknown, defaulting to 1000
[   65.367278][ T7002] bond1: entered promiscuous mode
[   65.370580][ T7002] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.385736][ T7002] bond1 (unregistering): Released all slaves
[   65.469783][ T7013] syzkaller1: entered promiscuous mode
[   65.471542][ T7013] syzkaller1: entered allmulticast mode
[   65.499609][ T7018] __nla_validate_parse: 9 callbacks suppressed
[   65.499625][ T7018] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.317'.
[   65.506781][ T7020] unknown channel width for channel at 909000KHz?
[   65.512320][ T7020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.318'.
[   65.532024][ T7024] siw: device registration error -23
[   65.602378][ T7034] lo speed is unknown, defaulting to 1000
[   65.604642][ T7034] wg1 speed is unknown, defaulting to 1000
[   65.629236][ T7034] netlink: 360 bytes leftover after parsing attributes in process `syz.0.323'.
[   65.638820][ T7034] lo speed is unknown, defaulting to 1000
[   65.640965][ T7034] wg1 speed is unknown, defaulting to 1000
[   65.886832][ T7039] lo speed is unknown, defaulting to 1000
[   65.901233][ T7039] wg1 speed is unknown, defaulting to 1000
[   65.936688][ T7052] lo speed is unknown, defaulting to 1000
[   65.949259][ T7052] wg1 speed is unknown, defaulting to 1000
[   66.003798][ T7052] lo speed is unknown, defaulting to 1000
[   66.006261][ T7052] wg1 speed is unknown, defaulting to 1000
[   66.074491][ T7067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.330'.
[   66.077842][ T7067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.330'.
[   66.081191][ T7067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.330'.
[   66.084089][ T7067] team0: No ports can be present during mode change
[   66.128682][ T7069] netlink: 'syz.1.331': attribute type 15 has an invalid length.
[   66.136648][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.331'.
[   66.450316][ T7085] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   66.454816][ T7084] bridge_slave_0: left allmulticast mode
[   66.458512][ T7084] bridge_slave_0: left promiscuous mode
[   66.461050][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.465514][ T7084] bridge_slave_1: left allmulticast mode
[   66.468744][ T7084] bridge_slave_1: left promiscuous mode
[   66.471333][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.476671][ T7084] bond0: (slave bond_slave_0): Releasing backup interface
[   66.481067][ T7084] bond0: (slave bond_slave_1): Releasing backup interface
[   66.484635][ T7084] team0: Port device team_slave_0 removed
[   66.488965][ T7084] team0: Port device team_slave_1 removed
[   66.491032][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.493810][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.498343][ T7084] netlink: 'syz.2.337': attribute type 10 has an invalid length.
[   66.500916][ T7084] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   66.504044][ T7084] bond0: (slave wlan1): Opening slave failed
[   67.116817][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'.
[   67.123884][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'.
[   67.131948][ T7097] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   67.134802][ T7097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.139582][ T7096] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   67.142648][ T7096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.147496][ T7097] TCP: TCP_TX_DELAY enabled
[   67.230440][ T7111] lo speed is unknown, defaulting to 1000
[   67.233090][ T7111] wg1 speed is unknown, defaulting to 1000
[   67.396987][ T7125] netlink: 'syz.2.348': attribute type 13 has an invalid length.
[   67.452877][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'.
[   67.458175][ T7129] netlink: 'syz.1.350': attribute type 16 has an invalid length.
[   67.461283][ T7129] netlink: 'syz.1.350': attribute type 17 has an invalid length.
[   67.534881][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.537416][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.603305][ T7129] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.620685][ T7129] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.699901][    T9] lo speed is unknown, defaulting to 1000
[   67.702206][    T9] syz2: Port: 1 Link DOWN
[   67.704231][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.707002][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.720583][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.731751][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.039309][ T7187] geneve2: entered promiscuous mode
[   68.042109][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.046372][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.051218][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.054672][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.378902][ T7197] lo speed is unknown, defaulting to 1000
[   68.381958][ T7197] wg1 speed is unknown, defaulting to 1000
[   68.569042][ T7202] team0: Mode "fctivebackup" not found
[   68.859211][ T7232] gtp0: entered promiscuous mode
[   68.923615][ T7243] siw: device registration error -23
[   68.947805][ T7243] netlink: 'syz.0.388': attribute type 4 has an invalid length.
[   69.354237][ T7273] siw: device registration error -23
[   69.369973][ T7273] netlink: 'syz.0.398': attribute type 4 has an invalid length.
[   69.400941][ T7276] netlink: 'syz.0.399': attribute type 20 has an invalid length.
[   69.406859][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.411774][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.415547][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.419662][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.423893][ T7276] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96
[   69.454521][ T7278] team0: No ports can be present during mode change
[   69.742575][ T7298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.804592][ T7307] IPVS: set_ctl: invalid protocol: 50 172.20.20.41:20004
[   69.921356][ T7319] lo speed is unknown, defaulting to 1000
[   69.924176][ T7319] wg1 speed is unknown, defaulting to 1000
[   70.335436][ T7372] validate_nla: 5 callbacks suppressed
[   70.335447][ T7372] netlink: 'syz.1.433': attribute type 10 has an invalid length.
[   70.341211][ T7372] bond0: (slave wlan1): Opening slave failed
[   70.365723][ T7375] team0: No ports can be present during mode change
[   70.390563][ T7377] lo speed is unknown, defaulting to 1000
[   70.392980][ T7377] wg1 speed is unknown, defaulting to 1000
[   71.033650][ T7381] __nla_validate_parse: 35 callbacks suppressed
[   71.033666][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'.
[   71.040276][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.436'.
[   71.043833][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'.
[   71.048323][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.436'.
[   71.051728][ T7381] netlink: 5 bytes leftover after parsing attributes in process `syz.0.436'.
[   71.058645][ T7381] netlink: 'syz.0.436': attribute type 16 has an invalid length.
[   71.061893][ T7381] netlink: 'syz.0.436': attribute type 17 has an invalid length.
[   71.109804][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.150054][ T5712] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.161602][ T5712] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.165202][ T5712] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.177329][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.407848][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'.
[   71.582986][ T7414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.448'.
[   71.708535][ T7422] netlink: 'syz.0.451': attribute type 4 has an invalid length.
[   71.711605][ T7422] netlink: 152 bytes leftover after parsing attributes in process `syz.0.451'.
[   71.719850][ T7422] : renamed from bond0
[   72.818851][ T7459] netlink: 'syz.0.464': attribute type 8 has an invalid length.
[   72.822295][ T7459] netlink: 64 bytes leftover after parsing attributes in process `syz.0.464'.
[   72.825250][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.464'.
[   73.257377][ T7477] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   73.420180][ T7502] lo speed is unknown, defaulting to 1000
[   73.425361][ T7502] wg1 speed is unknown, defaulting to 1000
[   73.433561][ T7504] lo speed is unknown, defaulting to 1000
[   73.449031][ T7504] wg1 speed is unknown, defaulting to 1000
[   73.465361][ T7502] xt_HMARK: proto mask must be zero with L3 mode
[   73.480668][ T7506] unsupported nlmsg_type 40
[   73.481917][ T7502] lo speed is unknown, defaulting to 1000
[   73.486412][ T7502] wg1 speed is unknown, defaulting to 1000
[   73.513697][ T7506] lo speed is unknown, defaulting to 1000
[   73.517451][ T7506] wg1 speed is unknown, defaulting to 1000
[   73.565732][ T7512] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   73.870110][ T7541] netlink: 'syz.1.492': attribute type 4 has an invalid length.
[   74.032780][ T7561] netlink: 'syz.0.499': attribute type 1 has an invalid length.
[   74.039216][ T7561] tipc: Started in network mode
[   74.041020][ T7561] tipc: Node identity 06fb7805f72, cluster identity 4711
[   74.043647][ T7561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.046645][ T7561] syzkaller0: entered promiscuous mode
[   74.053451][ T7561] syzkaller0: entered allmulticast mode
[   74.061000][ T7561] tipc: Resetting bearer <eth:syzkaller0>
[   74.065513][ T7560] tipc: Resetting bearer <eth:syzkaller0>
[   74.070056][ T7560] tipc: Disabling bearer <eth:syzkaller0>
[   74.426148][ T7573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.636837][ T7600] netlink: 'syz.0.513': attribute type 6 has an invalid length.
[   74.722630][ T7610] lo speed is unknown, defaulting to 1000
[   74.725044][ T7610] wg1 speed is unknown, defaulting to 1000
[   74.992410][ T7644] siw: device registration error -23
[   75.146967][ T7654] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   75.150041][ T7654] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   75.228693][ T7670] syzkaller1: entered promiscuous mode
[   75.230385][ T7670] syzkaller1: entered allmulticast mode
[   75.306080][ T7674] netlink: 'syz.1.542': attribute type 4 has an invalid length.
[   75.438970][ T7685] lo speed is unknown, defaulting to 1000
[   75.441570][ T7685] wg1 speed is unknown, defaulting to 1000
[   75.626367][ T7696] netlink: 'syz.1.550': attribute type 4 has an invalid length.
[   75.720482][ T7702] siw: device registration error -23
[   75.722412][ T7701] siw: device registration error -23
[   76.214616][ T7740] lo speed is unknown, defaulting to 1000
[   76.217748][ T7740] wg1 speed is unknown, defaulting to 1000
[   76.234183][ T7741] lo speed is unknown, defaulting to 1000
[   76.244375][ T7741] wg1 speed is unknown, defaulting to 1000
[   76.278933][ T7740] lo speed is unknown, defaulting to 1000
[   76.281867][ T7740] wg1 speed is unknown, defaulting to 1000
[   76.282635][ T7743] lo speed is unknown, defaulting to 1000
[   76.289795][ T7743] wg1 speed is unknown, defaulting to 1000
[   76.377697][ T7750] __nla_validate_parse: 28 callbacks suppressed
[   76.377711][ T7750] netlink: 92 bytes leftover after parsing attributes in process `syz.2.564'.
[   76.383179][ T7750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'.
[   76.477789][ T7754] lo speed is unknown, defaulting to 1000
[   76.480079][ T7754] wg1 speed is unknown, defaulting to 1000
[   76.591899][ T7760] Bluetooth: MGMT ver 1.23
[   76.807713][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.574'.
[   76.826314][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[   76.831539][ T7779] netlink: 'syz.1.575': attribute type 62 has an invalid length.
[   76.837577][ T7779] syzkaller1: entered promiscuous mode
[   76.839226][ T7779] syzkaller1: entered allmulticast mode
[   76.855453][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'.
[   76.858692][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'.
[   76.861519][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'.
[   76.902731][ T7785] netlink: 'syz.0.578': attribute type 1 has an invalid length.
[   76.906732][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'.
[   77.036445][ T7796] siw: device registration error -23
[   77.050704][ T7798] netlink: 'syz.0.582': attribute type 1 has an invalid length.
[   77.089223][ T7802] netlink: 'syz.1.584': attribute type 1 has an invalid length.
[   77.163095][ T7809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.586'.
[   77.163095][ T7808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.586'.
[   77.176088][ T7809] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[   77.180667][ T7809] netlink: 'syz.0.586': attribute type 2 has an invalid length.
[   77.183723][ T7809] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[   77.186757][ T7809] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[   77.196034][ T7808] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[   77.335998][ T7825] siw: device registration error -23
[   77.441085][ T7846] syz_tun: entered promiscuous mode
[   77.443174][ T7846] syz_tun: entered allmulticast mode
[   77.462180][ T7848] pim6reg1: entered promiscuous mode
[   77.464187][ T7848] pim6reg1: entered allmulticast mode
[   77.593551][ T7856] lo speed is unknown, defaulting to 1000
[   77.596200][ T7856] wg1 speed is unknown, defaulting to 1000
[   77.668958][ T7862] lo speed is unknown, defaulting to 1000
[   77.672406][ T7862] wg1 speed is unknown, defaulting to 1000
[   78.381198][ T7876] syzkaller1: entered promiscuous mode
[   78.383207][ T7876] syzkaller1: entered allmulticast mode
[   78.386107][ T7886] lo speed is unknown, defaulting to 1000
[   78.390118][ T7886] wg1 speed is unknown, defaulting to 1000
[   78.390447][ T7885] lo speed is unknown, defaulting to 1000
[   78.395064][ T7885] wg1 speed is unknown, defaulting to 1000
[   78.550397][ T7893] lo speed is unknown, defaulting to 1000
[   78.552949][ T7893] wg1 speed is unknown, defaulting to 1000
[   78.588479][ T7893] netlink: zone id is out of range
[   78.590312][ T7893] netlink: zone id is out of range
[   78.592132][ T7893] netlink: zone id is out of range
[   78.593888][ T7893] netlink: zone id is out of range
[   78.595682][ T7893] netlink: zone id is out of range
[   78.598036][ T7893] netlink: zone id is out of range
[   78.599725][ T7893] netlink: zone id is out of range
[   78.601593][ T7893] netlink: zone id is out of range
[   78.603287][ T7893] netlink: zone id is out of range
[   78.604960][ T7893] netlink: zone id is out of range
[   78.727477][ T7904] lo speed is unknown, defaulting to 1000
[   78.730303][ T7904] wg1 speed is unknown, defaulting to 1000
[   78.953078][ T7927] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20000
[   78.986958][ T7929] lo speed is unknown, defaulting to 1000
[   78.989870][ T7929] wg1 speed is unknown, defaulting to 1000
[   79.980977][ T7981] lo speed is unknown, defaulting to 1000
[   79.984047][ T7981] wg1 speed is unknown, defaulting to 1000
[   80.620368][ T8017] siw: device registration error -23
[   80.974991][ T8045] bond0: Unable to set down delay as MII monitoring is disabled
[   81.050872][ T8048] validate_nla: 4 callbacks suppressed
[   81.050889][ T8048] netlink: 'syz.2.656': attribute type 13 has an invalid length.
[   81.055947][ T8048] netlink: 'syz.2.656': attribute type 17 has an invalid length.
[   81.096246][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.100775][ T8048] 8021q: adding VLAN 0 to HW filter on device team0
[   81.122156][ T8047] lo speed is unknown, defaulting to 1000
[   81.124920][ T8047] wg1 speed is unknown, defaulting to 1000
[   81.326402][ T8067] syzkaller1: entered promiscuous mode
[   81.330046][ T8067] syzkaller1: entered allmulticast mode
[   81.348184][   T10] cfg80211: failed to load regulatory.db
[   81.499497][ T8069] lo speed is unknown, defaulting to 1000
[   81.502300][ T8069] wg1 speed is unknown, defaulting to 1000
[   81.540192][ T8070] batadv0: entered promiscuous mode
[   81.546878][ T8069] batadv0: entered promiscuous mode
[   81.660914][ T8082] lo speed is unknown, defaulting to 1000
[   81.663032][ T8082] wg1 speed is unknown, defaulting to 1000
[   81.736151][ T8082] lo speed is unknown, defaulting to 1000
[   81.756545][ T8082] wg1 speed is unknown, defaulting to 1000
[   81.864674][ T8098] __nla_validate_parse: 24 callbacks suppressed
[   81.864692][ T8098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.671'.
[   81.962890][ T8116] netlink: 152 bytes leftover after parsing attributes in process `syz.1.674'.
[   81.966361][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.674'.
[   82.015383][ T8098] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   82.023670][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.676'.
[   82.026360][ T8121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.676'.
[   82.035370][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.676'.
[   82.040131][ T8121] team0: No ports can be present during mode change
[   82.242135][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[   82.245539][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[   82.249918][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[   82.345451][ T8148] netlink: 'syz.0.687': attribute type 1 has an invalid length.
[   82.348355][ T8148] netlink: 'syz.0.687': attribute type 1 has an invalid length.
[   82.350926][ T8148] netlink: 'syz.0.687': attribute type 1 has an invalid length.
[   82.353409][ T8148] netlink: 'syz.0.687': attribute type 1 has an invalid length.
[   82.414488][ T8157] bridge_slave_0: left allmulticast mode
[   82.416232][ T8157] bridge_slave_0: left promiscuous mode
[   82.420344][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.423762][ T8157] bridge_slave_1: left allmulticast mode
[   82.425857][ T8157] bridge_slave_1: left promiscuous mode
[   82.427701][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.431793][ T8157] bond0: (slave bond_slave_0): Releasing backup interface
[   82.435369][ T8157] bond0: (slave bond_slave_1): Releasing backup interface
[   82.439586][ T8157] team0: Port device team_slave_0 removed
[   82.442352][ T8157] team0: Port device team_slave_1 removed
[   82.444421][ T8157] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.447256][ T8157] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.532627][ T8169] lo speed is unknown, defaulting to 1000
[   82.534181][ T8171] netlink: 'syz.2.693': attribute type 10 has an invalid length.
[   82.534378][ T8169] lo speed is unknown, defaulting to 1000
[   82.538160][ T8171] team0: Device hsr_slave_0 failed to register rx_handler
[   82.542058][ T8169] lo speed is unknown, defaulting to 1000
[   82.546857][ T8169] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   82.553684][ T8171] lo speed is unknown, defaulting to 1000
[   82.556217][ T8171] wg1 speed is unknown, defaulting to 1000
[   82.558946][ T8171] lo speed is unknown, defaulting to 1000
[   82.564126][ T8169] lo speed is unknown, defaulting to 1000
[   82.571790][ T8169] lo speed is unknown, defaulting to 1000
[   82.574384][ T8169] lo speed is unknown, defaulting to 1000
[   82.630717][ T8176] netlink: 280 bytes leftover after parsing attributes in process `syz.2.695'.
[   82.691296][ T8181] lo speed is unknown, defaulting to 1000
[   82.693889][ T8181] wg1 speed is unknown, defaulting to 1000
[   82.696333][ T8181] lo speed is unknown, defaulting to 1000
[   83.143340][ T8210] netlink: 'syz.2.707': attribute type 23 has an invalid length.
[   84.030296][ T8253] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[   84.472540][ T8300] lo speed is unknown, defaulting to 1000
[   84.474977][ T8300] wg1 speed is unknown, defaulting to 1000
[   84.478180][ T8300] lo speed is unknown, defaulting to 1000
[   85.092672][ T8308] netlink: 'syz.2.737': attribute type 6 has an invalid length.
[   85.182938][ T8316] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   85.406504][ T8324] siw: device registration error -23
[   85.499502][ T8342] tap0: tun_chr_ioctl cmd 2148553947
[   85.508078][ T8342] tap0: tun_chr_ioctl cmd 1074812117
[   85.523713][ T8343] bridge: RTM_NEWNEIGH with invalid ether address
[   85.717439][ T8358] team0: No ports can be present during mode change
[   85.864519][ T8362] IPVS: length: 49 != 24
[   86.012314][ T8377] lo speed is unknown, defaulting to 1000
[   86.014915][ T8377] wg1 speed is unknown, defaulting to 1000
[   86.018285][ T8377] lo speed is unknown, defaulting to 1000
[   86.311491][ T8395] lo speed is unknown, defaulting to 1000
[   86.319011][ T8395] wg1 speed is unknown, defaulting to 1000
[   86.321188][ T8395] lo speed is unknown, defaulting to 1000
[   86.350990][ T8401] lo speed is unknown, defaulting to 1000
[   86.361986][ T8401] wg1 speed is unknown, defaulting to 1000
[   86.367942][ T8401] lo speed is unknown, defaulting to 1000
[   86.533004][ T8401] lo speed is unknown, defaulting to 1000
[   86.535914][ T8401] wg1 speed is unknown, defaulting to 1000
[   86.545052][ T8401] lo speed is unknown, defaulting to 1000
[   86.599324][ T8424] netlink: 'syz.1.773': attribute type 2 has an invalid length.
[   86.602012][ T8424] netlink: 'syz.1.773': attribute type 1 has an invalid length.
[   86.677177][ T8419] nbd0: detected capacity change from 0 to 127
[   86.685574][ T8429] block nbd0: Receive control failed (result -104)
[   86.688079][   T56] block nbd0: Receive control failed (result -32)
[   86.805937][ T8442] bridge3: the hash_elasticity option has been deprecated and is always 16
[   86.900158][ T8450] __nla_validate_parse: 27 callbacks suppressed
[   86.900172][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'.
[   86.909838][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'.
[   86.920017][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'.
[   86.929300][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'.
[   86.932735][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'.
[   86.973874][ T8460] netlink: 48 bytes leftover after parsing attributes in process `syz.0.786'.
[   86.980371][ T8455] lo speed is unknown, defaulting to 1000
[   86.982657][ T8455] wg1 speed is unknown, defaulting to 1000
[   86.989121][  T792] IPVS: starting estimator thread 0...
[   86.989830][ T8455] lo speed is unknown, defaulting to 1000
[   87.087838][ T8463] IPVS: using max 92 ests per chain, 220800 per kthread
[   87.093340][ T8469] lo speed is unknown, defaulting to 1000
[   87.096260][ T8469] wg1 speed is unknown, defaulting to 1000
[   87.100246][ T8469] lo speed is unknown, defaulting to 1000
[   87.246531][ T8484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.795'.
[   87.388205][ T8491] lo speed is unknown, defaulting to 1000
[   87.391451][ T8491] wg1 speed is unknown, defaulting to 1000
[   87.395783][ T8491] lo speed is unknown, defaulting to 1000
[   87.467407][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'.
[   87.470386][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.799'.
[   87.473598][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'.
[   87.511770][ T8496] team0: Mode "fctivebackup" not found
[   87.550794][ T8503] netlink: 'syz.2.801': attribute type 1 has an invalid length.
[   88.060565][ T8520] team0: Mode "fctivebackup" not found
[   88.464401][ T8565] lo speed is unknown, defaulting to 1000
[   88.467582][ T8565] wg1 speed is unknown, defaulting to 1000
[   88.470871][ T8565] lo speed is unknown, defaulting to 1000
[   88.566068][ T8570] netlink: 'syz.0.822': attribute type 16 has an invalid length.
[   88.569180][ T8570] netlink: 'syz.0.822': attribute type 17 has an invalid length.
[   88.688143][ T8579] syzkaller0: entered promiscuous mode
[   88.690848][ T8579] syzkaller0: entered allmulticast mode
[   88.812170][ T8590] team0: Mode "fctivebackup" not found
[   88.911310][ T8597] netlink: 'syz.1.833': attribute type 1 has an invalid length.
[   89.128939][ T8611] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   90.306653][ T8658] netlink: 'syz.1.851': attribute type 2 has an invalid length.
[   90.364510][ T8662] veth5: entered promiscuous mode
[   90.375579][ T8663] veth7: entered promiscuous mode
[   90.676786][ T8679] net_ratelimit: 11 callbacks suppressed
[   90.676806][ T8679] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   90.712067][ T8681] lo speed is unknown, defaulting to 1000
[   90.714762][ T8681] wg1 speed is unknown, defaulting to 1000
[   90.719731][ T8681] lo speed is unknown, defaulting to 1000
[   90.750493][ T8681] lo speed is unknown, defaulting to 1000
[   90.752907][ T8681] wg1 speed is unknown, defaulting to 1000
[   90.755797][ T8681] lo speed is unknown, defaulting to 1000
[   90.789292][ T8684] siw: device registration error -23
[   90.835516][ T8692] netlink: 'syz.2.865': attribute type 1 has an invalid length.
[   91.228413][ T8746] team0: No ports can be present during mode change
[   91.244628][ T8742] lo speed is unknown, defaulting to 1000
[   91.249417][ T8742] wg1 speed is unknown, defaulting to 1000
[   91.252318][ T8742] lo speed is unknown, defaulting to 1000
[   91.838110][ T8781] IPVS: Error connecting to the multicast addr
[   91.851751][ T8781] lo speed is unknown, defaulting to 1000
[   91.854656][ T8781] wg1 speed is unknown, defaulting to 1000
[   91.857831][ T8781] lo speed is unknown, defaulting to 1000
[   91.890450][ T8781] gretap0: entered promiscuous mode
[   91.922924][ T8781] __nla_validate_parse: 43 callbacks suppressed
[   91.922936][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'.
[   91.972952][ T8781] lo speed is unknown, defaulting to 1000
[   91.975909][ T8781] wg1 speed is unknown, defaulting to 1000
[   91.980181][ T8781] lo speed is unknown, defaulting to 1000
[   92.172979][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'.
[   92.271123][ T8805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.281408][ T8805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.285675][ T8805] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[   92.327723][ T8807] netlink: 'syz.1.902': attribute type 1 has an invalid length.
[   92.330602][ T8807] netlink: 244 bytes leftover after parsing attributes in process `syz.1.902'.
[   92.356325][ T8807] netlink: 'syz.1.902': attribute type 4 has an invalid length.
[   92.534600][ T8818] netlink: 248 bytes leftover after parsing attributes in process `syz.1.905'.
[   92.596652][ T8821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.906'.
[   92.602023][ T8821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.906'.
[   92.632522][ T8825] netlink: 'syz.1.907': attribute type 10 has an invalid length.
[   92.636312][ T8825] batman_adv: batadv0: Adding interface: netdevsim0
[   92.640611][ T8825] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.651648][ T8825] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   92.656094][ T8825] siw: device registration error -23
[   92.821970][ T8835] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   92.827377][ T8835] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   92.844979][ T8835] netlink: 'syz.2.910': attribute type 13 has an invalid length.
[   92.849591][ T8835] netlink: 'syz.2.910': attribute type 17 has an invalid length.
[   92.852521][ T8835] netlink: 'syz.2.910': attribute type 27 has an invalid length.
[   92.935091][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'.
[   92.950855][ T8842] lo speed is unknown, defaulting to 1000
[   92.954560][ T8842] wg1 speed is unknown, defaulting to 1000
[   92.957667][ T8842] lo speed is unknown, defaulting to 1000
[   92.987607][ T8845] lo speed is unknown, defaulting to 1000
[   92.990537][ T8845] wg1 speed is unknown, defaulting to 1000
[   92.993266][ T8845] lo speed is unknown, defaulting to 1000
[   93.423462][ T8891] netlink: 80 bytes leftover after parsing attributes in process `syz.0.924'.
[   93.652517][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.931'.
[   93.740001][ T8925] lo speed is unknown, defaulting to 1000
[   93.743119][ T8925] wg1 speed is unknown, defaulting to 1000
[   93.745661][ T8925] lo speed is unknown, defaulting to 1000
[   93.806421][ T8925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.936'.
[   94.311904][ T8986] netlink: 'syz.2.951': attribute type 6 has an invalid length.
[   94.543255][  T792] IPVS: starting estimator thread 0...
[   94.638153][ T9005] IPVS: using max 92 ests per chain, 220800 per kthread
[   94.644812][ T9018] trusted_key: syz.1.962 sent an empty control message without MSG_MORE.
[   94.682237][ T9014] mac80211_hwsim hwsim4 ;: renamed from wlan0
[   94.714150][ T9025] team0: Mode "fctivebackup" not found
[   94.775142][ T9031] lo speed is unknown, defaulting to 1000
[   94.779158][ T9031] wg1 speed is unknown, defaulting to 1000
[   94.782930][ T9031] lo speed is unknown, defaulting to 1000
[   94.913495][ T9049] team0: Mode "fctivebackup" not found
[   94.996242][ T9062] tipc: Enabled bearer <eth:macvtap0>, priority 10
[   95.020186][ T9064] netlink: 'syz.2.977': attribute type 1 has an invalid length.
[   95.022537][ T9064] netlink: 'syz.2.977': attribute type 1 has an invalid length.
[   95.207639][ T9075] team0: No ports can be present during mode change
[   95.944950][ T9102] netlink: 'syz.2.989': attribute type 16 has an invalid length.
[   95.987325][  T792] tipc: Node number set to 751347140
[   96.066571][ T9115] team0: Mode "fctivebackup" not found
[   96.166805][ T9126] siw: device registration error -23
[   96.243919][ T9134] team0: Mode "fctivebackup" not found
[   96.460411][ T9159] team0: Mode "fctivebackup" not found
[   96.528279][ T9167] lo speed is unknown, defaulting to 1000
[   96.530780][ T9167] wg1 speed is unknown, defaulting to 1000
[   96.533742][ T9167] lo speed is unknown, defaulting to 1000
[   96.642320][ T9183] lo speed is unknown, defaulting to 1000
[   96.645109][ T9183] wg1 speed is unknown, defaulting to 1000
[   96.649000][ T9183] lo speed is unknown, defaulting to 1000
[   96.706764][ T9183] lo speed is unknown, defaulting to 1000
[   96.709918][ T9183] wg1 speed is unknown, defaulting to 1000
[   96.712061][ T9183] lo speed is unknown, defaulting to 1000
[   96.822297][ T9197] lo speed is unknown, defaulting to 1000
[   96.825361][ T9197] wg1 speed is unknown, defaulting to 1000
[   96.828397][ T9197] lo speed is unknown, defaulting to 1000
[   96.893172][ T9208] macvtap1: entered promiscuous mode
[   96.895219][ T9208] macvtap1: entered allmulticast mode
[   96.898984][ T9208] syz_tun: entered allmulticast mode
[   96.901176][ T9208] syz_tun: entered promiscuous mode
[   96.904913][ T9208] team0: Device macvtap1 failed to register rx_handler
[   96.914599][ T9208] syz_tun: left allmulticast mode
[   96.916827][ T9208] syz_tun: left promiscuous mode
[   97.048709][ T9213] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   97.700197][ T9235] syzkaller1: entered promiscuous mode
[   97.702572][ T9235] syzkaller1: entered allmulticast mode
[   97.888182][ T9246] batman_adv: batadv0: Removing interface: netdevsim0
[   97.948038][ T9251] validate_nla: 1 callbacks suppressed
[   97.948094][ T9251] netlink: 'syz.1.1034': attribute type 10 has an invalid length.
[   97.952964][ T9251] bond0: (slave wlan1): Opening slave failed
[   97.960618][ T9251] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   97.966418][ T9251] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   98.105146][ T9260] lo speed is unknown, defaulting to 1000
[   98.109139][ T9260] wg1 speed is unknown, defaulting to 1000
[   98.112173][ T9260] lo speed is unknown, defaulting to 1000
[   98.193384][ T9269] lo speed is unknown, defaulting to 1000
[   98.195636][ T9269] wg1 speed is unknown, defaulting to 1000
[   98.202652][ T9269] lo speed is unknown, defaulting to 1000
[   99.027310][ T9287] __nla_validate_parse: 45 callbacks suppressed
[   99.027321][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'.
[   99.032563][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'.
[   99.035802][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'.
[   99.045936][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'.
[   99.050389][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'.
[   99.196955][ T9297] lo speed is unknown, defaulting to 1000
[   99.200658][ T9297] wg1 speed is unknown, defaulting to 1000
[   99.203750][ T9297] lo speed is unknown, defaulting to 1000
[   99.237933][ T9297] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1052'.
[   99.251923][ T9297] lo speed is unknown, defaulting to 1000
[   99.254829][ T9297] wg1 speed is unknown, defaulting to 1000
[   99.258153][ T9297] lo speed is unknown, defaulting to 1000
[   99.314448][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'.
[   99.384878][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1054'.
[   99.584600][ T9318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1057'.
[   99.954987][ T9340] lo speed is unknown, defaulting to 1000
[   99.958916][ T9340] wg1 speed is unknown, defaulting to 1000
[   99.962243][ T9340] lo speed is unknown, defaulting to 1000
[  100.589754][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'.
[  100.635294][ T9360] netlink: 'syz.0.1071': attribute type 16 has an invalid length.
[  100.638501][ T9360] netlink: 'syz.0.1071': attribute type 17 has an invalid length.
[  100.651680][ T9351] syzkaller1: entered promiscuous mode
[  100.653509][ T9351] syzkaller1: entered allmulticast mode
[  100.825294][ T9378] team0: No ports can be present during mode change
[  101.832389][ T9427] lo speed is unknown, defaulting to 1000
[  101.835389][ T9427] wg1 speed is unknown, defaulting to 1000
[  101.840298][ T9427] lo speed is unknown, defaulting to 1000
[  101.967453][ T9434] lo speed is unknown, defaulting to 1000
[  101.971754][ T9434] wg1 speed is unknown, defaulting to 1000
[  101.972165][ T9435] lo speed is unknown, defaulting to 1000
[  101.974861][ T9434] lo speed is unknown, defaulting to 1000
[  101.977853][ T9435] wg1 speed is unknown, defaulting to 1000
[  101.986085][ T9435] lo speed is unknown, defaulting to 1000
[  102.140953][ T9444] lo speed is unknown, defaulting to 1000
[  102.145217][ T9444] wg1 speed is unknown, defaulting to 1000
[  102.159350][ T9444] lo speed is unknown, defaulting to 1000
[  102.340623][ T9481] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 512, id = 0
[  102.365050][ T9485] netlink: 'syz.0.1107': attribute type 16 has an invalid length.
[  102.377737][ T9485] netlink: 'syz.0.1107': attribute type 17 has an invalid length.
[  102.399583][ T9482] siw: device registration error -23
[  102.507874][ T9502] siw: device registration error -23
[  102.560466][ T9505] lo speed is unknown, defaulting to 1000
[  102.563576][ T9505] wg1 speed is unknown, defaulting to 1000
[  102.567351][ T9505] lo speed is unknown, defaulting to 1000
[  102.667530][ T9514] netlink: 'syz.2.1117': attribute type 3 has an invalid length.
[  102.721011][ T9518] lo speed is unknown, defaulting to 1000
[  102.723458][ T9518] wg1 speed is unknown, defaulting to 1000
[  102.726229][ T9518] lo speed is unknown, defaulting to 1000
[  103.159211][ T9528] geneve3: entered promiscuous mode
[  103.257673][ T9534] : entered promiscuous mode
[  103.699387][ T9556] delete_channel: no stack
[  104.332707][ T9577] __nla_validate_parse: 20 callbacks suppressed
[  104.332721][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'.
[  104.424013][ T9586] openvswitch: netlink: IP tunnel dst address not specified
[  104.482205][ T9593] netlink: 'syz.1.1145': attribute type 4 has an invalid length.
[  104.635722][ T9602] netlink: 'syz.1.1147': attribute type 2 has an invalid length.
[  104.788733][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1151'.
[  104.791605][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1151'.
[  104.825569][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'.
[  104.829908][ T9631] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1155'.
[  104.832931][ T9631] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1155'.
[  104.839015][ T9631] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1155'.
[  104.849422][ T9631] syzkaller1: entered promiscuous mode
[  104.851353][ T9631] syzkaller1: entered allmulticast mode
[  104.934356][ T9641] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20001
[  105.054064][ T9657] netlink: 'syz.1.1164': attribute type 1 has an invalid length.
[  105.146419][ T9666] lo speed is unknown, defaulting to 1000
[  105.149485][ T9666] wg1 speed is unknown, defaulting to 1000
[  105.151786][ T9666] lo speed is unknown, defaulting to 1000
[  105.426844][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'.
[  105.468614][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'.
[  105.472289][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'.
[  105.727602][ T9728] lo speed is unknown, defaulting to 1000
[  105.730562][ T9728] wg1 speed is unknown, defaulting to 1000
[  105.733635][ T9728] lo speed is unknown, defaulting to 1000
[  105.796841][ T9738] siw: device registration error -23
[  105.816089][ T9737] macsec0: entered promiscuous mode
[  105.818078][ T9737] team0: entered promiscuous mode
[  105.819877][ T9737] team_slave_0: entered promiscuous mode
[  105.821837][ T9737] team_slave_1: entered promiscuous mode
[  105.920399][ T9745] team0: No ports can be present during mode change
[  106.370651][ T9763] lo speed is unknown, defaulting to 1000
[  106.373735][ T9763] wg1 speed is unknown, defaulting to 1000
[  106.376825][ T9763] lo speed is unknown, defaulting to 1000
[  106.414522][ T9763] lo speed is unknown, defaulting to 1000
[  106.416865][ T9763] wg1 speed is unknown, defaulting to 1000
[  106.416865][ T9765] lo speed is unknown, defaulting to 1000
[  106.421049][ T9763] lo speed is unknown, defaulting to 1000
[  106.421194][ T9765] wg1 speed is unknown, defaulting to 1000
[  106.425935][ T9765] lo speed is unknown, defaulting to 1000
[  106.769081][ T9786] lo speed is unknown, defaulting to 1000
[  106.771273][ T9786] wg1 speed is unknown, defaulting to 1000
[  106.773456][ T9786] lo speed is unknown, defaulting to 1000
[  106.975546][ T9802] netlink: 'syz.1.1207': attribute type 1 has an invalid length.
[  107.176648][ T9819] bond1: entered promiscuous mode
[  107.180224][ T9819] bond1: entered allmulticast mode
[  107.183343][ T9819] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.213601][ T9819] lo speed is unknown, defaulting to 1000
[  107.215999][ T9819] wg1 speed is unknown, defaulting to 1000
[  107.218832][ T9819] lo speed is unknown, defaulting to 1000
[  107.892486][ T9853] team0: Mode "fctivebackup" not found
[  108.212881][ T9871] netlink: 'syz.2.1229': attribute type 4 has an invalid length.
[  108.245105][ T9873] netlink: 'syz.2.1230': attribute type 1 has an invalid length.
[  108.247232][ T9874] netlink: 'syz.2.1230': attribute type 1 has an invalid length.
[  108.415099][ T9882] team0: Mode "fctivebackup" not found
[  108.611219][ T9910] lo speed is unknown, defaulting to 1000
[  108.616178][ T9910] wg1 speed is unknown, defaulting to 1000
[  108.620902][ T9910] lo speed is unknown, defaulting to 1000
[  108.652738][ T9914] team0: Mode "fctivebackup" not found
[  108.976926][ T9961] netlink: 'syz.1.1258': attribute type 3 has an invalid length.
[  109.069209][ T9974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.072150][ T9974] syzkaller0: entered promiscuous mode
[  109.074233][ T9974] syzkaller0: entered allmulticast mode
[  109.084358][ T9974] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  109.088764][ T9974] syzkaller0: mtu less than device minimum
[  109.091094][ T9973] tipc: Resetting bearer <eth:syzkaller0>
[  109.094162][ T9973] tipc: Disabling bearer <eth:syzkaller0>
[  109.302313][ T9980] lo speed is unknown, defaulting to 1000
[  109.309327][ T9980] wg1 speed is unknown, defaulting to 1000
[  109.309671][ T9981] lo speed is unknown, defaulting to 1000
[  109.311778][ T9980] lo speed is unknown, defaulting to 1000
[  109.314089][ T9981] wg1 speed is unknown, defaulting to 1000
[  109.325832][ T9981] lo speed is unknown, defaulting to 1000
[  109.444484][ T9996] netlink: 'syz.2.1268': attribute type 4 has an invalid length.
[  109.454126][ T9996] netlink: 'syz.2.1268': attribute type 4 has an invalid length.
[  109.515215][T10007] netlink: 'syz.1.1272': attribute type 11 has an invalid length.
[  109.569547][T10015] __nla_validate_parse: 58 callbacks suppressed
[  109.569557][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'.
[  109.575090][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'.
[  109.629288][T10015] openvswitch: netlink: IPv4 tun info is not correct
[  109.682809][T10028] syz.0.1277 uses old SIOCAX25GETINFO
[  109.796832][T10040] lo speed is unknown, defaulting to 1000
[  109.800926][T10040] wg1 speed is unknown, defaulting to 1000
[  109.804066][T10040] lo speed is unknown, defaulting to 1000
[  109.870224][T10045] Driver unsupported XDP return value 0 on prog  (id 267) dev N/A, expect packet loss!
[  109.904050][T10054] syz_tun: left promiscuous mode
[  109.905958][T10054] syz_tun: left allmulticast mode
[  109.916398][T10054] geneve2: left promiscuous mode
[  109.925161][T10054] geneve3: left promiscuous mode
[  109.931436][T10054] bond1: left promiscuous mode
[  109.933357][T10054] bond1: left allmulticast mode
[  109.937345][ T5712] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.939123][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'.
[  109.942970][ T5712] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.947947][ T5712] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.954485][T10060] batman_adv: batadv0: Adding interface: ipvlan2
[  109.956776][T10060] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.967194][T10060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.970717][T10060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.974118][T10060] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  109.977741][ T5712] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.982625][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'.
[  110.330815][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'.
[  110.452777][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1299'.
[  110.455687][T10105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1299'.
[  110.459739][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1299'.
[  110.463567][T10105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1299'.
[  110.467813][T10105] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1299'.
[  110.476142][T10105] netlink: 'syz.2.1299': attribute type 16 has an invalid length.
[  110.479719][T10105] netlink: 'syz.2.1299': attribute type 17 has an invalid length.
[  110.812911][T10128] lo speed is unknown, defaulting to 1000
[  110.815510][T10128] wg1 speed is unknown, defaulting to 1000
[  110.818103][T10128] lo speed is unknown, defaulting to 1000
[  110.853848][T10128] lo speed is unknown, defaulting to 1000
[  110.856223][T10128] wg1 speed is unknown, defaulting to 1000
[  110.858745][T10128] lo speed is unknown, defaulting to 1000
[  111.057019][T10147] netlink: 'syz.0.1314': attribute type 1 has an invalid length.
[  111.060342][T10147] netlink: 'syz.0.1314': attribute type 3 has an invalid length.
[  111.212675][T10157] !: renamed from dummy0
[  111.224436][T10160] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  111.235284][T10160] lo speed is unknown, defaulting to 1000
[  111.238118][T10160] wg1 speed is unknown, defaulting to 1000
[  111.240544][T10160] lo speed is unknown, defaulting to 1000
[  111.279572][T10164] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  111.289737][T10167] netlink: 'syz.1.1319': attribute type 7 has an invalid length.
[  111.300900][T10164] lo speed is unknown, defaulting to 1000
[  111.305239][T10164] wg1 speed is unknown, defaulting to 1000
[  111.307951][T10164] lo speed is unknown, defaulting to 1000
[  111.324000][T10160] lo speed is unknown, defaulting to 1000
[  111.335537][T10160] wg1 speed is unknown, defaulting to 1000
[  111.344028][T10160] lo speed is unknown, defaulting to 1000
[  111.461883][T10191] netlink: 'syz.1.1320': attribute type 6 has an invalid length.
[  111.872259][T10250] lo speed is unknown, defaulting to 1000
[  111.874520][T10250] wg1 speed is unknown, defaulting to 1000
[  111.877693][T10250] lo speed is unknown, defaulting to 1000
[  112.244039][T10281] netlink: 'syz.2.1331': attribute type 16 has an invalid length.
[  112.247307][T10281] netlink: 'syz.2.1331': attribute type 17 has an invalid length.
[  112.316267][T10286] lo speed is unknown, defaulting to 1000
[  112.320609][T10286] wg1 speed is unknown, defaulting to 1000
[  112.324945][T10286] lo speed is unknown, defaulting to 1000
[  112.893565][T10310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.939107][T10317] netlink: 'syz.0.1342': attribute type 4 has an invalid length.
[  112.964980][T10321] syzkaller0: entered promiscuous mode
[  112.966816][T10321] syzkaller0: entered allmulticast mode
[  113.031442][T10323] lo speed is unknown, defaulting to 1000
[  113.034364][T10323] wg1 speed is unknown, defaulting to 1000
[  113.037558][T10323] lo speed is unknown, defaulting to 1000
[  113.859659][T10336] team0: No ports can be present during mode change
[  114.285005][T10391] geneve3: entered promiscuous mode
[  114.288967][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  114.292068][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  114.296017][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  114.299877][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  114.417146][T10428] lo speed is unknown, defaulting to 1000
[  114.419337][T10428] wg1 speed is unknown, defaulting to 1000
[  114.421958][T10428] lo speed is unknown, defaulting to 1000
[  114.564266][T10440] lo speed is unknown, defaulting to 1000
[  114.568913][T10440] wg1 speed is unknown, defaulting to 1000
[  114.571637][T10440] lo speed is unknown, defaulting to 1000
[  114.654307][T10445] validate_nla: 6 callbacks suppressed
[  114.654319][T10445] netlink: 'syz.1.1379': attribute type 16 has an invalid length.
[  114.660219][T10445] netlink: 'syz.1.1379': attribute type 17 has an invalid length.
[  114.709250][T10447] __nla_validate_parse: 28 callbacks suppressed
[  114.709266][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'.
[  114.715265][T10447] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1380'.
[  114.861539][T10462] netlink: 'syz.1.1384': attribute type 6 has an invalid length.
[  115.112076][T10486] lo speed is unknown, defaulting to 1000
[  115.114416][T10486] wg1 speed is unknown, defaulting to 1000
[  115.116812][T10486] lo speed is unknown, defaulting to 1000
[  115.196948][T10499] netlink: 'syz.1.1396': attribute type 6 has an invalid length.
[  115.202422][T10499] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1396'.
[  115.234287][T10501] lo speed is unknown, defaulting to 1000
[  115.236844][T10501] wg1 speed is unknown, defaulting to 1000
[  115.242816][T10501] lo speed is unknown, defaulting to 1000
[  115.271768][T10504] netlink: 'syz.1.1398': attribute type 4 has an invalid length.
[  115.387002][T10512] veth0_to_bond: entered promiscuous mode
[  115.389570][T10512] veth0_to_bond: entered allmulticast mode
[  115.411388][T10511] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  115.413813][T10511] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  115.465198][T10527] siw: device registration error -23
[  115.502983][T10533] vlan2: entered allmulticast mode
[  115.505006][T10533] bridge_slave_0: entered allmulticast mode
[  115.655835][T10551] lo speed is unknown, defaulting to 1000
[  115.659346][T10551] wg1 speed is unknown, defaulting to 1000
[  115.662673][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'.
[  115.662900][T10551] lo speed is unknown, defaulting to 1000
[  115.674207][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'.
[  115.678849][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'.
[  115.727962][T10563] siw: device registration error -23
[  115.745488][T10565] lo speed is unknown, defaulting to 1000
[  115.749532][T10565] wg1 speed is unknown, defaulting to 1000
[  115.752636][T10565] lo speed is unknown, defaulting to 1000
[  115.794478][T10565] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1413'.
[  115.809646][T10565] lo speed is unknown, defaulting to 1000
[  115.812309][T10565] wg1 speed is unknown, defaulting to 1000
[  115.814762][T10565] lo speed is unknown, defaulting to 1000
[  115.858934][T10574] netlink: 'syz.2.1417': attribute type 6 has an invalid length.
[  116.674589][T10589] lo speed is unknown, defaulting to 1000
[  116.676902][T10589] wg1 speed is unknown, defaulting to 1000
[  116.679712][T10589] lo speed is unknown, defaulting to 1000
[  116.718405][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'.
[  116.722539][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'.
[  116.730694][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'.
[  116.772036][T10599] netlink: 'syz.2.1423': attribute type 1 has an invalid length.
[  116.873142][T10612] lo speed is unknown, defaulting to 1000
[  116.875493][T10612] wg1 speed is unknown, defaulting to 1000
[  116.878328][T10612] lo speed is unknown, defaulting to 1000
[  116.897695][T10607] geneve4: entered promiscuous mode
[  116.902802][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  116.908625][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  116.933090][T10615] team0: Mode "fctivebackup" not found
[  116.945764][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  116.948696][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  117.089294][T10645] netlink: 'syz.1.1439': attribute type 15 has an invalid length.
[  117.199921][   T61] block nbd0: Connection timed out, retrying (0/2 alive)
[  117.202911][   T61] block nbd0: Connection timed out, retrying (0/2 alive)
[  117.205793][   T61] block nbd0: Connection timed out, retrying (0/2 alive)
[  117.208779][   T61] block nbd0: Connection timed out, retrying (0/2 alive)
[  117.211558][   T61] block nbd0: Dead connection, failed to find a fallback
[  117.214452][   T61] block nbd0: shutting down sockets
[  117.216640][   T61] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.220686][   T61] Buffer I/O error on dev nbd0, logical block 3, async page read
[  117.225081][   T61] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.229553][   T61] Buffer I/O error on dev nbd0, logical block 2, async page read
[  117.232741][   T61] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.236447][   T61] Buffer I/O error on dev nbd0, logical block 1, async page read
[  117.239779][   T61] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.243574][   T61] Buffer I/O error on dev nbd0, logical block 0, async page read
[  117.253256][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.256650][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read
[  117.259627][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.262910][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read
[  117.265673][ T5841] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.269206][ T5841] Buffer I/O error on dev nbd0, logical block 2, async page read
[  117.273277][ T5841] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.277906][ T5841] Buffer I/O error on dev nbd0, logical block 3, async page read
[  117.281415][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.305541][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read
[  117.308765][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.309984][T10666] netlink: 'syz.1.1446': attribute type 6 has an invalid length.
[  117.312262][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read
[  117.313773][ T5841] ldm_validate_partition_table(): Disk read failed.
[  117.321848][ T5841] Dev nbd0: unable to read RDB block 0
[  117.325303][ T5841]  nbd0: unable to read partition table
[  117.331108][ T5841] ldm_validate_partition_table(): Disk read failed.
[  117.337850][ T5841] Dev nbd0: unable to read RDB block 0
[  117.340562][ T5841]  nbd0: unable to read partition table
[  117.350422][T10667] lo speed is unknown, defaulting to 1000
[  117.352812][T10667] wg1 speed is unknown, defaulting to 1000
[  117.355088][T10667] lo speed is unknown, defaulting to 1000
[  117.786333][T10691] lo speed is unknown, defaulting to 1000
[  117.788597][T10691] wg1 speed is unknown, defaulting to 1000
[  117.790873][T10691] lo speed is unknown, defaulting to 1000
[  117.819392][T10691] lo speed is unknown, defaulting to 1000
[  117.821710][T10691] wg1 speed is unknown, defaulting to 1000
[  117.824402][T10691] lo speed is unknown, defaulting to 1000
[  118.531177][T10769] lo speed is unknown, defaulting to 1000
[  118.533478][T10769] wg1 speed is unknown, defaulting to 1000
[  118.535952][T10769] lo speed is unknown, defaulting to 1000
[  118.573155][T10769] lo speed is unknown, defaulting to 1000
[  118.579140][T10769] wg1 speed is unknown, defaulting to 1000
[  118.583210][T10769] lo speed is unknown, defaulting to 1000
[  118.672202][T10786] netlink: 'syz.2.1471': attribute type 1 has an invalid length.
[  118.872553][T10812] team0: Mode "fctivebackup" not found
[  119.051251][T10840] lo speed is unknown, defaulting to 1000
[  119.053997][T10840] wg1 speed is unknown, defaulting to 1000
[  119.056265][T10840] lo speed is unknown, defaulting to 1000
[  119.544422][T10893] geneve2: entered promiscuous mode
[  119.550102][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.553067][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.556297][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.559222][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.730395][T10898] sctp: [Deprecated]: syz.0.1509 (pid 10898) Use of int in maxseg socket option.
[  119.730395][T10898] Use struct sctp_assoc_value instead
[  119.825254][T10903] __nla_validate_parse: 35 callbacks suppressed
[  119.825272][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'.
[  119.831566][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1511'.
[  119.881080][T10907] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1513'.
[  119.884653][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1513'.
[  119.890315][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1513'.
[  119.932049][T10907] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1513'.
[  119.936926][T10907] xt_limit: Overflow, try lower: 271964/0
[  119.940884][T10908] xt_limit: Overflow, try lower: 271964/0
[  119.968393][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'.
[  119.971253][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'.
[  119.974168][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'.
[  119.978472][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'.
[  120.161093][T10932] validate_nla: 1 callbacks suppressed
[  120.161134][T10932] netlink: 'syz.1.1523': attribute type 1 has an invalid length.
[  120.282062][T10944] netlink: 'syz.2.1526': attribute type 16 has an invalid length.
[  120.284569][T10944] netlink: 'syz.2.1526': attribute type 17 has an invalid length.
[  120.290494][ T5871] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  120.293773][ T5871] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  120.296730][ T5871] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  120.301706][ T5871] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  120.319911][T10947] lo speed is unknown, defaulting to 1000
[  120.322324][T10947] wg1 speed is unknown, defaulting to 1000
[  120.325295][T10947] lo speed is unknown, defaulting to 1000
[  120.873847][T10951] lo speed is unknown, defaulting to 1000
[  120.876356][T10951] wg1 speed is unknown, defaulting to 1000
[  120.882853][T10951] lo speed is unknown, defaulting to 1000
[  120.916878][T10951] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20003
[  120.948249][T10954] lo speed is unknown, defaulting to 1000
[  120.950852][T10954] wg1 speed is unknown, defaulting to 1000
[  120.953402][T10954] lo speed is unknown, defaulting to 1000
[  121.152296][T10963] pim6reg1: entered promiscuous mode
[  121.154371][T10963] pim6reg1: entered allmulticast mode
[  121.220259][T10963] bond2 (unregistering): Released all slaves
[  121.330426][T10971] lo speed is unknown, defaulting to 1000
[  121.334602][T10971] wg1 speed is unknown, defaulting to 1000
[  121.338180][T10971] lo speed is unknown, defaulting to 1000
[  121.434282][T10976] lo speed is unknown, defaulting to 1000
[  121.436700][T10976] wg1 speed is unknown, defaulting to 1000
[  121.511543][T10976] lo speed is unknown, defaulting to 1000
[  121.828867][T11003] netlink: 'syz.1.1542': attribute type 6 has an invalid length.
[  122.108866][T11028] netlink: 'syz.2.1551': attribute type 1 has an invalid length.
[  122.216069][T11039] team0: Mode "fctivebackup" not found
[  122.271881][T11054] lo speed is unknown, defaulting to 1000
[  122.276367][T11054] wg1 speed is unknown, defaulting to 1000
[  122.280178][T11054] lo speed is unknown, defaulting to 1000
[  122.324549][T11063] lo speed is unknown, defaulting to 1000
[  122.332278][T11063] wg1 speed is unknown, defaulting to 1000
[  122.335256][T11063] lo speed is unknown, defaulting to 1000
[  122.341918][T11066] lo speed is unknown, defaulting to 1000
[  122.344090][T11066] wg1 speed is unknown, defaulting to 1000
[  122.351990][T11066] lo speed is unknown, defaulting to 1000
[  122.458720][T11081] team0: Mode "fctivebackup" not found
[  122.544647][T11103] ==================================================================
[  122.547902][T11103] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  122.550435][T11103] Read of size 1 at addr ffff8880284a1530 by task syz.0.1575/11103
[  122.554274][T11103] 
[  122.555258][T11103] CPU: 1 UID: 0 PID: 11103 Comm: syz.0.1575 Not tainted syzkaller #0 PREEMPT(full) 
[  122.555279][T11103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.555290][T11103] Call Trace:
[  122.555311][T11103]  <TASK>
[  122.555319][T11103]  dump_stack_lvl+0x189/0x250
[  122.555343][T11103]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.555361][T11103]  ? lock_release+0x4b/0x3e0
[  122.555385][T11103]  ? __virt_addr_valid+0x4a5/0x5c0
[  122.555405][T11103]  print_report+0xca/0x240
[  122.555418][T11103]  ? xfrm_state_find+0x2cf2/0x5400
[  122.555432][T11103]  kasan_report+0x118/0x150
[  122.555453][T11103]  ? xfrm_state_find+0x2cf2/0x5400
[  122.555470][T11103]  xfrm_state_find+0x2cf2/0x5400
[  122.555488][T11103]  ? rcu_is_watching+0x15/0xb0
[  122.555506][T11103]  ? xfrm_state_find+0x1da/0x5400
[  122.555522][T11103]  ? __pfx_xfrm_state_find+0x10/0x10
[  122.555535][T11103]  ? lock_release+0x4b/0x3e0
[  122.555554][T11103]  ? lock_release+0x4b/0x3e0
[  122.555576][T11103]  ? is_bpf_text_address+0x292/0x2b0
[  122.555601][T11103]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  122.555628][T11103]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  122.555648][T11103]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  122.555672][T11103]  ? lock_release+0x4b/0x3e0
[  122.555729][T11103]  ? xfrm_selector_match+0xbcf/0x1140
[  122.555745][T11103]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  122.555776][T11103]  ? rcu_is_watching+0x15/0xb0
[  122.555789][T11103]  ? xfrm_expand_policies+0x41f/0x6a0
[  122.555809][T11103]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  122.555830][T11103]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  122.555847][T11103]  ? raw_sendmsg+0x626/0x18b0
[  122.555861][T11103]  ? rcu_is_watching+0x15/0xb0
[  122.555876][T11103]  ? rcu_is_watching+0x15/0xb0
[  122.555890][T11103]  xfrm_lookup_route+0x3c/0x1c0
[  122.555908][T11103]  raw_sendmsg+0x1039/0x18b0
[  122.555954][T11103]  ? __pfx_raw_sendmsg+0x10/0x10
[  122.555973][T11103]  ? __pfx_futex_wake_mark+0x10/0x10
[  122.555998][T11103]  ? aa_sk_perm+0x81e/0x950
[  122.556021][T11103]  ? __pfx_aa_sk_perm+0x10/0x10
[  122.556040][T11103]  ? tomoyo_socket_sendmsg_permission+0x216/0x300
[  122.556056][T11103]  ? sock_rps_record_flow+0x19/0x410
[  122.556074][T11103]  ? inet_sendmsg+0x2f4/0x370
[  122.556091][T11103]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  122.556108][T11103]  __sock_sendmsg+0x19c/0x270
[  122.556128][T11103]  __sys_sendto+0x3bd/0x520
[  122.556141][T11103]  ? __pfx___sys_sendto+0x10/0x10
[  122.556153][T11103]  ? do_futex+0x333/0x420
[  122.556180][T11103]  ? __pfx___se_sys_futex+0x10/0x10
[  122.556200][T11103]  __x64_sys_sendto+0xde/0x100
[  122.556215][T11103]  do_syscall_64+0xfa/0x3b0
[  122.556229][T11103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.556243][T11103]  ? exc_page_fault+0x9f/0xf0
[  122.556264][T11103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.556279][T11103] RIP: 0033:0x7f470b18ebe9
[  122.556294][T11103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.556308][T11103] RSP: 002b:00007f470bf3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  122.556325][T11103] RAX: ffffffffffffffda RBX: 00007f470b3b5fa0 RCX: 00007f470b18ebe9
[  122.556337][T11103] RDX: 0000000000000b00 RSI: 0000000000000000 RDI: 0000000000000007
[  122.556346][T11103] RBP: 00007f470b211e19 R08: 0000200000000000 R09: 0000000000000010
[  122.556356][T11103] R10: 0000000000048812 R11: 0000000000000246 R12: 0000000000000000
[  122.556365][T11103] R13: 00007f470b3b6038 R14: 00007f470b3b5fa0 R15: 00007ffd21c40dc8
[  122.556379][T11103]  </TASK>
[  122.556384][T11103] 
[  122.681722][T11103] Allocated by task 8460:
[  122.683492][T11103]  kasan_save_track+0x3e/0x80
[  122.685103][T11103]  __kasan_slab_alloc+0x6c/0x80
[  122.686604][T11103]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  122.688286][T11103]  xfrm_state_alloc+0x24/0x2f0
[  122.690134][T11103]  __find_acq_core+0x8a7/0x1c00
[  122.692040][T11103]  xfrm_find_acq+0x78/0xa0
[  122.693631][T11103]  xfrm_alloc_userspi+0x6b3/0xc90
[  122.695385][T11103]  xfrm_user_rcv_msg+0x7a3/0xab0
[  122.696931][T11103]  netlink_rcv_skb+0x208/0x470
[  122.698387][T11103]  xfrm_netlink_rcv+0x79/0x90
[  122.699980][T11103]  netlink_unicast+0x82f/0x9e0
[  122.701538][T11103]  netlink_sendmsg+0x805/0xb30
[  122.703096][T11103]  __sock_sendmsg+0x21c/0x270
[  122.704594][T11103]  ____sys_sendmsg+0x505/0x830
[  122.706155][T11103]  ___sys_sendmsg+0x21f/0x2a0
[  122.707652][T11103]  __x64_sys_sendmsg+0x19b/0x260
[  122.709455][T11103]  do_syscall_64+0xfa/0x3b0
[  122.710897][T11103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.712822][T11103] 
[  122.713587][T11103] Freed by task 10:
[  122.714812][T11103]  kasan_save_track+0x3e/0x80
[  122.716358][T11103]  kasan_save_free_info+0x46/0x50
[  122.717969][T11103]  __kasan_slab_free+0x5b/0x80
[  122.719762][T11103]  kmem_cache_free+0x18f/0x400
[  122.721678][T11103]  xfrm_state_gc_task+0x52d/0x6b0
[  122.723692][T11103]  process_scheduled_works+0xae1/0x17b0
[  122.725897][T11103]  worker_thread+0x8a0/0xda0
[  122.727583][T11103]  kthread+0x711/0x8a0
[  122.729049][T11103]  ret_from_fork+0x3fc/0x770
[  122.730542][T11103]  ret_from_fork_asm+0x1a/0x30
[  122.732065][T11103] 
[  122.732889][T11103] The buggy address belongs to the object at ffff8880284a1200
[  122.732889][T11103]  which belongs to the cache xfrm_state of size 928
[  122.737728][T11103] The buggy address is located 816 bytes inside of
[  122.737728][T11103]  freed 928-byte region [ffff8880284a1200, ffff8880284a15a0)
[  122.742121][T11103] 
[  122.742947][T11103] The buggy address belongs to the physical page:
[  122.744983][T11103] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880284a2880 pfn:0x284a0
[  122.748143][T11103] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  122.750948][T11103] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  122.753250][T11103] page_type: f5(slab)
[  122.754500][T11103] raw: 00fff00000000040 ffff8881054a2280 dead000000000122 0000000000000000
[  122.757122][T11103] raw: ffff8880284a2880 00000000800e0005 00000000f5000000 0000000000000000
[  122.759797][T11103] head: 00fff00000000040 ffff8881054a2280 dead000000000122 0000000000000000
[  122.762488][T11103] head: ffff8880284a2880 00000000800e0005 00000000f5000000 0000000000000000
[  122.765206][T11103] head: 00fff00000000002 ffffea0000a12801 00000000ffffffff 00000000ffffffff
[  122.767892][T11103] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  122.771043][T11103] page dumped because: kasan: bad access detected
[  122.773166][T11103] page_owner tracks the page as allocated
[  122.775004][T11103] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6034, tgid 6032 (syz.0.32), ts 50863930302, free_ts 50859728323
[  122.780877][T11103]  post_alloc_hook+0x240/0x2a0
[  122.782595][T11103]  get_page_from_freelist+0x21e4/0x22c0
[  122.784769][T11103]  __alloc_frozen_pages_noprof+0x181/0x370
[  122.787095][T11103]  alloc_pages_mpol+0x232/0x4a0
[  122.789072][T11103]  allocate_slab+0x8a/0x370
[  122.790893][T11103]  ___slab_alloc+0xbeb/0x1410
[  122.792776][T11103]  kmem_cache_alloc_noprof+0x283/0x3c0
[  122.794690][T11103]  xfrm_state_alloc+0x24/0x2f0
[  122.796382][T11103]  pfkey_add+0x6e4/0x2e00
[  122.797823][T11103]  pfkey_sendmsg+0xbfe/0x1090
[  122.799260][T11103]  __sock_sendmsg+0x21c/0x270
[  122.800688][T11103]  ____sys_sendmsg+0x505/0x830
[  122.802184][T11103]  ___sys_sendmsg+0x21f/0x2a0
[  122.803621][T11103]  __x64_sys_sendmsg+0x19b/0x260
[  122.805127][T11103]  do_syscall_64+0xfa/0x3b0
[  122.806519][T11103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.808343][T11103] page last free pid 5841 tgid 5841 stack trace:
[  122.810283][T11103]  __free_frozen_pages+0xbc4/0xd30
[  122.811857][T11103]  __slab_free+0x303/0x3c0
[  122.813240][T11103]  qlist_free_all+0x97/0x140
[  122.814665][T11103]  kasan_quarantine_reduce+0x148/0x160
[  122.816301][T11103]  __kasan_slab_alloc+0x22/0x80
[  122.817748][T11103]  __kmalloc_noprof+0x224/0x4f0
[  122.819347][T11103]  tomoyo_realpath_from_path+0xe3/0x5d0
[  122.821092][T11103]  tomoyo_check_open_permission+0x1c1/0x3b0
[  122.822944][T11103]  security_file_open+0xb1/0x270
[  122.824675][T11103]  do_dentry_open+0x384/0x13f0
[  122.826510][T11103]  vfs_open+0x3b/0x340
[  122.827805][T11103]  path_openat+0x2ee5/0x3830
[  122.829265][T11103]  do_filp_open+0x1fa/0x410
[  122.830682][T11103]  do_sys_openat2+0x121/0x1c0
[  122.832473][T11103]  __x64_sys_openat+0x138/0x170
[  122.834069][T11103]  do_syscall_64+0xfa/0x3b0
[  122.835501][T11103] 
[  122.836266][T11103] Memory state around the buggy address:
[  122.838024][T11103]  ffff8880284a1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  122.840491][T11103]  ffff8880284a1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  122.842868][T11103] >ffff8880284a1500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  122.845219][T11103]                                      ^
[  122.846961][T11103]  ffff8880284a1580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  122.849332][T11103]  ffff8880284a1600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  122.851925][T11103] ==================================================================
[  122.861728][T11106] policy can only be matched on NF_INET_PRE_ROUTING
[  122.861759][T11106] unable to load match
[  122.877319][T11103] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  122.880120][T11103] CPU: 0 UID: 0 PID: 11103 Comm: syz.0.1575 Not tainted syzkaller #0 PREEMPT(full) 
[  122.883390][T11103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.886967][T11103] Call Trace:
[  122.888237][T11103]  <TASK>
[  122.889334][T11103]  dump_stack_lvl+0x99/0x250
[  122.890927][T11103]  ? __asan_memcpy+0x40/0x70
[  122.892528][T11103]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.894352][T11103]  ? __pfx__printk+0x10/0x10
[  122.895965][T11103]  vpanic+0x281/0x750
[  122.897354][T11103]  ? preempt_schedule+0xae/0xc0
[  122.899012][T11103]  ? __pfx_vpanic+0x10/0x10
[  122.900600][T11103]  ? preempt_schedule_common+0x83/0xd0
[  122.902814][T11103]  ? preempt_schedule+0xae/0xc0
[  122.904769][T11103]  ? __pfx_preempt_schedule+0x10/0x10
[  122.906929][T11103]  panic+0xb9/0xc0
[  122.908451][T11103]  ? __pfx_panic+0x10/0x10
[  122.910015][T11103]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  122.912034][T11103]  ? xfrm_state_find+0x2cf2/0x5400
[  122.913703][T11103]  check_panic_on_warn+0x89/0xb0
[  122.915250][T11103]  ? xfrm_state_find+0x2cf2/0x5400
[  122.916841][T11103]  end_report+0x78/0x160
[  122.918324][T11103]  kasan_report+0x129/0x150
[  122.919940][T11103]  ? xfrm_state_find+0x2cf2/0x5400
[  122.921656][T11103]  xfrm_state_find+0x2cf2/0x5400
[  122.923298][T11103]  ? rcu_is_watching+0x15/0xb0
[  122.924845][T11103]  ? xfrm_state_find+0x1da/0x5400
[  122.926480][T11103]  ? __pfx_xfrm_state_find+0x10/0x10
[  122.928280][T11103]  ? lock_release+0x4b/0x3e0
[  122.929763][T11103]  ? lock_release+0x4b/0x3e0
[  122.931425][T11103]  ? is_bpf_text_address+0x292/0x2b0
[  122.933482][T11103]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  122.935959][T11103]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  122.938252][T11103]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  122.940793][T11103]  ? lock_release+0x4b/0x3e0
[  122.942685][T11103]  ? xfrm_selector_match+0xbcf/0x1140
[  122.944867][T11103]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  122.947286][T11103]  ? rcu_is_watching+0x15/0xb0
[  122.949191][T11103]  ? xfrm_expand_policies+0x41f/0x6a0
[  122.951330][T11103]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  122.953418][T11103]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  122.955750][T11103]  ? raw_sendmsg+0x626/0x18b0
[  122.957618][T11103]  ? rcu_is_watching+0x15/0xb0
[  122.959484][T11103]  ? rcu_is_watching+0x15/0xb0
[  122.961401][T11103]  xfrm_lookup_route+0x3c/0x1c0
[  122.963357][T11103]  raw_sendmsg+0x1039/0x18b0
[  122.965235][T11103]  ? __pfx_raw_sendmsg+0x10/0x10
[  122.967126][T11103]  ? __pfx_futex_wake_mark+0x10/0x10
[  122.969280][T11103]  ? aa_sk_perm+0x81e/0x950
[  122.971157][T11103]  ? __pfx_aa_sk_perm+0x10/0x10
[  122.973129][T11103]  ? tomoyo_socket_sendmsg_permission+0x216/0x300
[  122.975684][T11103]  ? sock_rps_record_flow+0x19/0x410
[  122.977822][T11103]  ? inet_sendmsg+0x2f4/0x370
[  122.979691][T11103]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  122.981799][T11103]  __sock_sendmsg+0x19c/0x270
[  122.983657][T11103]  __sys_sendto+0x3bd/0x520
[  122.985472][T11103]  ? __pfx___sys_sendto+0x10/0x10
[  122.987465][T11103]  ? do_futex+0x333/0x420
[  122.989203][T11103]  ? __pfx___se_sys_futex+0x10/0x10
[  122.991268][T11103]  __x64_sys_sendto+0xde/0x100
[  122.993146][T11103]  do_syscall_64+0xfa/0x3b0
[  122.994944][T11103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.997318][T11103]  ? exc_page_fault+0x9f/0xf0
[  122.999169][T11103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.001477][T11103] RIP: 0033:0x7f470b18ebe9
[  123.003261][T11103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.010755][T11103] RSP: 002b:00007f470bf3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  123.014058][T11103] RAX: ffffffffffffffda RBX: 00007f470b3b5fa0 RCX: 00007f470b18ebe9
[  123.017177][T11103] RDX: 0000000000000b00 RSI: 0000000000000000 RDI: 0000000000000007
[  123.020238][T11103] RBP: 00007f470b211e19 R08: 0000200000000000 R09: 0000000000000010
[  123.023365][T11103] R10: 0000000000048812 R11: 0000000000000246 R12: 0000000000000000
[  123.026491][T11103] R13: 00007f470b3b6038 R14: 00007f470b3b5fa0 R15: 00007ffd21c40dc8
[  123.029632][T11103]  </TASK>
[  123.031563][T11103] Kernel Offset: disabled
[  123.033331][T11103] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:18:13  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44ceb RBX=1ffff11026cc7f61 RCX=ffff8881061a9cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90007877700 RSP=ffffc90007877580
R8 =ffffffff8fa38437 R9 =1ffffffff1f47086 R10=dffffc0000000000 R11=fffffbfff1f47087
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44cd3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000003200 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003172 656c6c616b7a7973
XMM02=fb262888d1cfe291 63d9a7f65252cc25 XMM03=ce65402d293e049f f047e746ee8a6195
XMM04=621ac4ce65402d29 3e049ff047e746ee XMM05=8a6195fb262888d1 cfe29163d9a7f652
XMM06=52cc253fa16d8cbb c226f956ce7680e4 XMM07=4ee0154e95fe2899 459340238d109fa8
XMM08=b12ca7a00552443b 1b04e1ee47068cd8 XMM09=0000000000000000 00007f9d21212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012da RDI=00000000000012db RBP=00000000000003f8 RSP=ffffc900075d6b90
R8 =ffff888108cb8237 R9 =1ffff11021197046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb913 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f470bf3d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9d21ff5fc8 CR3=000000003ab18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f470b387498 00007f470b387470 XMM03=00007f470b3874a8 00007f470b3874a0
XMM04=00007f470beed100 00007f470b387460 XMM05=00007f470b387478 00007f470b3874c0
XMM06=00007f470b3874b8 00007f470b3874b0 XMM07=00007f470b3874a8 00007f470b3874a0
XMM08=0000000000000000 00007f470b212ee7 XMM09=0000000000000000 00007f470b212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
